» 



■* 




4. 

(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
International Bureau 

(43) International Publication Date 
28 December 2000 (28.12.2000) 




PCT 



(10) International Publication Number 

WO 00/79452 A2 



(5i) International Patent Classification 7 : G06F 17/60 

(21) International Application Number: PCT/US0(V16669 

(22) International Filing Date: 16 June 2000 (16.06. 2000) 

(25) Filing Language: English 

(26) Publication Language: English 



(30) Priority Data: 
60/140,039 
09/370,949 
09/578,395 



18 June 1999 (18.06.1999) US 
9 August 1999 (09.08.1999) US 
25 May 2000 (25.05.2000) US 



(71) Applicant: ECHARGE CORPORATION [US/US]; 
Suite 1000, 500 Union Street, Seattle, WA 98101 (US). 

(72) Inventors: HUTCHISON, Robin, B.; 1846 West 14th 
Avenue, Vancouver, British Columbia V6J 2J9 (CA). 



LLEWELLYN, Robert, C; 3109 Lincoln Road NE, 
Poulsbo, WA 98370 (US). VEUOEN, Andre, R; 405 
3980 Inlet Crescent, North Vancouver, British Columbia 
V7J 2P9 (CA). GRIFFITHS, David; 150 River Meads, 
Stanstead Abbotts, Ware, Hertfordshire SGI 2 8EL (GB). 
BIRCH, David; 1 Armdale Road, Woking, Surrey GU21 
3LP (GB). BEGG, Iain, M; 1004 Kelowna Street, Van- 
couver, British Columbia V5K 4E1 (CA). 

(74) Agent: PHILIPP, Adam, L, K.; Christensen O'Connor 
Johnson & Kindness PLLC, Suite 2800, 1420 Fifth Avenue, 
Seattle, WA 98101 (US). 

(81) Designated States (national): AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, CA, CH, CN, CR, CU, CZ, DE, 
DK, DM, DZ, EE, ES, H, GB, GD, GE, GH, GM, HR, HU, 
ID. IL, IN. IS, JP, KE, KG, KP, KR. KZ, LC. LK, LR, LS, 
LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, NO, 
NZ, PL, FT, RO, RU, SD, SE, SG. SI. SK, SL, TJ, TM, TR, 
TT, TZ UA, UG, UZ. VN, YU, ZA, ZW. 



/ Continued on next page] 



(54) Title: METHOD AND APPARATUS FOR ORDERING GOODS, SERVICES AND CONTENT OVER AN INTERNET- 
WORK USING A VIRTUAL PAYMENT ACCOUNT 



< 

IT) 

OS 



O 




ADMlNlSTBATIVt 
USEE 



COMMERCE ID BU1EAU 
CATtWAY 




(57) Abstract: A virtual payment system for ordering and 
paying for goods, services and content over an internetwork is 
disclosed. The virtual payment system comprises a commerce 
gateway component (52) and a credit processing server 
component (53). The virtual payment system is a secure, 
closed system comprising registered sellers and buyers. A 
buyer becomes a registered participant by applying for a virtual 
payment account. Likewise, a seller becomes registered by 
applying for a seller account A buyer can instantly open an 
account on-line. That is, the credit processing component 
(53) immediately evaluates the buyer's virtual payment card 
application and assigns a credit limit to the account. Once 
an account is established, a digital certificate is stored on the 
registered participant's computer. The buyer can then order a 
product, i.e^ goods, services or content from a seller and charge 
it to the virtual payment account When the product is shipped, 
the seller notifies the commerce gateway component (52), 
which in turn notifies the credit processing server that applies 
the charges to the buyer's virtual payment account The buyer 
can settle the charges using a prepaid account, a credit account, 
or by using reward points earned through use of the virtual 
payment card. A buyer may create sub-accounts. 



CREDIT FINANCIAL 
BUUZAU INSTITUTION 



WO 00/79452 A2 laiiiiifliiiiiiyiiiiiiiiigfi 



(84) Designated States (regional): ARIPO patent (GH, GM, 
KE t LS, MW, MZ, SD, SL, SZ, TZ, UG, ZW), Eurasian 
patent (AM, AZ, BY, KG, KZ, MD, RU,TJ, TM) T European 
patent (AT, BE, CH. CY, DE, DK, ES. Fl, FR, GB, GR. IE, 
IT, LU, MC, NL. PT, SE), OAP1 patent (BF, BJ, CF, CG, 
CI, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 



Published: 

— Without international search report and to be republished 
upon receipt of that report. 

For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



WO 00/79452 PCT/USOO/16669 



METHOD AND APPARATUS FOR ORDERING GOODS, SERVICES AND 
CONTENT OVER AN INTERNETWORK USING A VIRTUAL PAYMENT 

ACCOUNT 
Cross-Reference to Related Applications 
5 This application is a Continuation-In-Part of prior United States Application 

No. 09/140,949, filed August 9, 1999, priority from the filing date of which is hereby 
claimed under 35 U.S.C. § 120. This application also claims the benefit of 
Provisional Application No. 60/140,039, filed June 18, 1999, the benefit of which is 
hereby claimed under 35 U.S.C. § 1 19. 
10 Field of the Invention 

This invention generally relates to a method and apparatus for ordering goods, 
services and content from one or more other computers connected via common 
communications links and, more particularly, to a method and apparatus for ordering 
goods, services and content from computers connected to the Internet using a virtual 
15 payment account. 

Background of the Invention 
Communication networks are well known in the computer communications 
field. By definition, a network is a group of computers and associated devices that 
are connected by communications facilities or links. Network cornrnunications can 
20 be of a permanent nature, such as via cables, or can be of a temporary nature, such as 
connections made through telephone or radio links. Networks may vary in size, from 
a local area network (LAN) consisting of a few computers or workstations and related 
devices; to a wide area network (WAN) which interconnects computers and LANs 
that are geographically dispersed; to a remote access service (RAS) which 
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interconnects remote computers via temporary communication links. An 
internetwork, in turn, is the joining of multiple computer networks, both similar and 
dissimilar, by means of gateways or routers that facilitate data transfer and 
conversion from various networks. A well-known abbreviation for the term 
internetwork is "Internet." As currently understood, the capitalized term "Internet" 
refers to the collection of networks and routers that use the Transmission Control 
Protocol/Internet Protocol (TCP/IP) to communicate with one another. 

A representative section of the Internet 40 is shown in FIGURE 1 (Prior Art) 
in which a plurality of local area networks (LANs) 44 and a wide area network 
(WAN) 46 are interconnected by routers 42. The routers 42 are generally special 
purpose computers used to interface one LAN or WAN to another. Communication 
links within the LANs may be twisted wire pair, or coaxial cable, while 
communication links between networks may utilize 56 Kbps analog telephone lines, 
or 1 Mbps digital T-l lines and/or 45 Mbps T-3 lines. Further, computers and other 
15 related electronic devices can be remotely connected to either the LANs 44 or the 
WAN 46 via a modem and temporary telephone link. Such computers and electronic 
devices 48 are shown in FIGURE 1 as connected to one of the LANs 44 by a dotted 
line. It will be appreciated that the Internet comprises a vast number of such 
interconnected networks, computers and routers and that only a small, representative 
20 section of the Internet 40 is shown in FIGURE 1 . 

The Internet has recently seen explosive growth by virtue of its ability to link 
computers located throughout the world. As the Internet has grown, so has the World 
Wide Web (WWW). The WWW is a vast collection of interconnected or "hypertext- 
documents (also known as "Web pages") written in HyperText Markup Language 
25 (HTML) that are electronically stored at "Web sites" throughout the Internet. A Web 
site is a server connected to the Internet that has mass storage facilities for storing 
hypertext documents and that runs administrative software for handling requests for 
those stored hypertext documents. A hypertext document normally includes a 
number of hyperlinks, i.e., highlighted portions of text that link the document to 
30 another hypertext document possibly stored at a Web site elsewhere on the Internet. 
Each hyperlink is associated with a Uniform Resource Locator (URL) that provides 
the exact location of the linked document on a server connected to the Internet. Thus, 
whenever a hypertext document is retrieved from any Web server, the document is 
considered to be retrieved from the WWW. 
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A user is allowed to retrieve hypertext documents from the WWW, i e a user 
is allowed to "surf the Web," via a Web browser. A Web browsed, such as 
NETSCAPE NAVIGATOR® or MICROSOFT® Internet Explorer, is a software 
program implemented by a Web client, i.e., a user's computer, to provide a graphical 
5 user interface to the WWW. Upon request from the user via the Web browser, the 
Web client accesses and retrieves the desired hypertext document or Web page from 
the appropriate Web server using the URL for the document and a protocol known as 
HyperText Transfer Protocol (HTTP). HTTP is a higher-level protocol than TCP/IP 
and is designed specifically for the requirements of the WWW. It is used on top of 
1 0 TCP/IP to transfer hypertext documents between servers and clients. 

At the advent of the WWW, the information stored on the Internet was freely 
transferred back and forth between those parties interested in the information 
However, the WWW is quickly becoming a channel of commercial activity, whereby 
a vast number of companies have developed their own Web sites for advertising and 
selling their goods and services. Commercial activity that takes place by means of 
connected computers is known as electronic commerce, or e-commerce, and can 
occur between a buyer and a seller through an on-line information service, the 
Internet, a bulletin board system (BBS), or between buyer and seller computers 
through electronic data interchange (EDI). A buyer (also referred to as a user, 
consumer or purchaser in the context of e-commerce) may "visit the Web site" of a 
company or seller, i.e., retrieve the hypertext documents located on the Web server of 
a particular seller, and order any good or service that the seller has to offer. If that 
good or service is in the form of electronically stored information, such as a book, a 
video, a computer game, etc., the buyer may simply download the good or service 
from the company's Web site to his or her computer for immediate consumption and 
use. If the good or service is of a more tangible nature, such as an appliance or article 
of clothing ordered from an on-line catalog, a more conventional method of delivery, 
e.g., the postal service or a common carrier, is used. 

A common method of payment for e-commerce purchases is electronic credit, 
or e-credit. E-credit is a form of electronic commerce often involving credit card 
transactions carried out over the Internet. Traditional e-credit purchases are paid for 
by a major credit card, wherein the buyer is required to transmit his or her credit 
information, for example, an account number and expiration date, over the Internet to 
the company's Web site. Many buyers are concerned about the security and 
confidentiality of such electronic transmissions. Furthermore, many buyers do not 
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have a major credit card with which to make such purchases. Alternative billing 
systems, such as providing credit information by facsimile or postal service, are much 
less convenient and often prove enough of a barrier to prohibit the sale altogether. 
Finally, the traditional methods of billing and payment do not adequately protect the 
seller or buyer from fraudulent purchases. 

Accordingly, a more effective method and apparatus for ordering and billing 
for goods, services and content over a network, and ultimately the Internet, is needed. 
The method and apparatus should protect the seller and buyer from fraudulent 
purchases. Additionally, the method and apparatus should provide an element of 
non-repudiation to all transactions. The method and apparatus should also prevent 
buyers with histories of nonpayment from purchasing additional goods, services 
and/or content. Finally, the method and apparatus should allow a buyer without a 
major credit card to purchase goods, services and content over the network. 

Summary of the Invention 
The present invention provides a computer program for ordering products 
from computers connected to the Internet, wherein the buyer is automatically billed 
for the ordered good, service or content based on a virtual payment account 
maintained by a commerce gateway. 

In accordance with other aspects of the present invention, a commerce 
20 gateway interfaces with a credit processing server to handle the monetary aspects 
involved in purchasing goods, services and/or content. The credit processing server 
interfaces with one or more financial institutions that physically handle the buyer's 
account. For example, a buyer can pay for purchases electronically by transferring 
funds from a bank account held by the buyer at a financial institution, or by prepaying 
25 for the purchases by sending a check to the provider of the commerce gateway. 
Alternatively, reward points earned by using the virtual payment account can be 
applied towards purchases. 

In accordance with still other aspects of the present invention, the credit 
processing server or commerce gateway communicates with one or more identity 
30 bureaus in order to determine a buyer's identity before creating a virtual payment 
account. 

In accordance with still other aspects of the present invention, the credit 
processing server communicates with one or more credit bureaus in order to 
determine a credit limit for a buyer's virtual payment account. 
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In accordance with yet other aspects of the present invention, a virtual 
payment account can have associated sub-accounts. A sub-account can have a credit 
limit that is less than the main account credit limit. A sub-account can limit the seller 
sites from which goods, services and/or content can be purchased. 

In accordance with further aspects of the present invention, purchases must be 
made by a registered buyer from a registered seller. Security is ensured via 
authentication of the parties to a transaction. Authentication can be performed by 
verification of a digital certificate, or a digital signature, or by alternate authentication 
methods. 

Brief Description of the Drawings 
The foregoing aspects and many of the attendant advantages of this invention 
will become more readily appreciated as the same become better understood by 
reference to the following detailed description, when taken in conjunction with the 
accompanying drawings, wherein: 

FIGURE 1 (Prior Art) is a block diagram of a representative portion of the 
Internet; 

FIGURE 2 is a pictorial diagram of a local area network (LAN) connected to 
the Internet which supplies goods, services and/or content ordered by a buyer using a 
computer located elsewhere on the Internet in accordance with the present invention; 

FIGURE 3 is a block diagram of the several components of the buyer's 
computer shown in FIGURE 2 that is used to order goods, services and/or content 
from the Internet in accordance with the present invention; 

FIGURE 4 is a block diagram of the several components of a seller server 
shown in FIGURE 2 that provides the ordered goods, services and/or content in 
accordance with the present invention; 

FIGURE 5 is a block diagram of the several components of a commerce 
gateway shown in FIGURE 2 that is used to interface between the Internet and a 
credit processing server in accordance with the present invention; 

FIGURE 6 is a block diagram of the several components of a credit 
processing server shown in FIGURE 2 that provides for the payment of the ordered 
goods, services and/or content in accordance with the present invention; 

FIGURE 7 is a diagram illustrating the actions taken by a buyer's computer, 
the commerce gateway, the credit processing server, an identity bureau and a credit 
bureau to create a virtual payment account for a buyer; 
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FIGURES 8A-8G are exemplary Web pages displayed on a buyer's computer 
when applying for a virtual payment account in accordance with the present 
invention; 

FIGURES 9A-9C are exemplary Web pages used by a buyer to customize the 
5 virtual payment account applied for in accordance with the present invention; 

FIGURES 1 OA- 10C are exemplary Web pages displayed on a buyer's 
computer containing account statements and reports for a buyer's virtual payment 
account in accordance with the present invention; 

FIGURES 1IA-1 IE are exemplary Web pages used by a buyer to purchase 
10 goods, services and/or content in accordance with the present invention; 

FIGURE 12 is a flow diagram illustrating the logic used by the buyer's 
computer to order goods, services and/or content from the Internet using the Web 
browser; 

FIGURE 13 is a flow diagram illustrating the logic used by a buyer 
1 5 authenticator of the buyer's computer to validate that the buyer is a registered virtual 
payment account participant; 

FIGURE 14 is a flow diagram illustrating the logic used by an alternate buyer 
authenticator of the buyer's computer to validate that the buyer is a registered virtual 
payment account participant; 
20 FIGURE 15 is a flow diagram illustrating the logic used by the buyer's 

computer to apply for a virtual payment account using the Web browser; 

FIGURE 16 is a flow diagram illustrating the logic used by an enrollment 
server of the commerce gateway shown in FIGURE 5 to establish a new buyer 
account in accordance with the present invention; 
25 FIGURE 17 a flow diagram illustrating the logic used by an account 

identification container generator of the commerce gateway shown in FIGURE 5 to 
generate an account identification for a given transaction; 

FIGURE 18 is a flow diagram illustrating the logic used by a commerce 
engine of a seller computer shown in FIGURE 4 to provide for the ordering, shipment 
30 and payment of goods, services and/or content over the Internet; 

FIGURE 19 is a flow diagram illustrating the logic used by a commerce 
gateway adapter of the seller server shown in FIGURE 4 to allow a commerce engine 
to communicate with a transaction server on the commerce gateway; 
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FIGURE 20 is a flow diagram illustrating the logic used by the transaction 
server of the commerce gateway shown in FIGURE 5 to process an order for goods, 
services and/or content over the Internet using a virtual payment account; 

FIGURES 21 and 22 are flow diagrams illustrating the logic used by various 
5 sub-systems of the credit processing server shown FIGURE 6 to provide for payment 
of goods, services and/or content ordered over the Internet using a virtual payment 
account; 

FIGURE 23 is a diagram illustrating the actions taken by the buyer's 
computer, the seller server and the commerce gateway to order goods, services and/or 
10 content using the virtual payment account; 

FIGURE 24 is a flow diagram illustrating the logic used by the seller's 
computer to perform a settlement transaction, i.e., initiate transfer of funds; 

FIGURE 25 is a flow diagram illustrating the logic used by the transaction 
server of the commerce gateway shown in FIGURE 5 to process a settlement 
15 transaction; 

FIGURE 26 is a flow diagram illustrating the logic used by the 
administrator's computer to initiate a refund to be applied to a virtual payment 
account in accordance with the present invention; 

FIGURE 27 is a flow diagram illustrating the logic used by a commerce 
20 gateway to process a request for information from an identity bureau; 

FIGURE 28 is an exemplary window of an e-mail computer program 
containing an alternate authentication message; 

FIGURE 29 is a pictorial diagram of an exemplary device showing an 
alternate authentication message; 

FIGURE 30 is an exemplary Web page showing an alternate authentication 
dialog; 

FIGURES 31-41 are exemplary Web pages used by a seller to view 
transactions, status of payments and reports; 

FIGURE 42 is a flow diagram illustrating the logic used to authenticate a 
30 seller and generate a report for seller. 

Detailed Desc ription of the Preferred Emhnrlimp nt 

* 

As previously described and shown in FIGURE I, the Internet 40 is a 
collection of local area networks (LANs) 44, wide area networks (WANs) 46, remote 
computers 48 and routers 42 that use the Transmission Control Protoco internet 
Protocol (TCP/IP) to communicate with each other. The World Wide Web (WWW), 
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on the other hand, is a vast collection of interconnected, electronically stored 
information located on servers connected throughout the Internet 40. Many 
companies are now selling goods, services and access to their premium content over 
the Internet using the WWW. In accordance with the present invention, a buyer 
5 orders goods, services and/or content (referred to interchangeably herein as 
"products") over the Internet 40 via a Web browser and is automatically billed for the 
purchase using his or her virtual payment account without transferring sensitive 
account information, such as account number and expiration date, over the 
Internet 40. The virtual payment account allows a buyer to settle transactions of the 
,1 0 virtual payment account using a prepaid or credit account. In one actual embodiment 
of the present invention, the virtual payment account uses bank electronic funds 
transfers, for example, using the Automated Clearing House (ACH) standard which is 
maintained by the National Automated Clearing House Association (NACHA) - the 
standards group promoting electronic commerce standards. In another embodiment, 
the virtual payment account can be funded using a traditional paper check, with the 
buyer mailing a check, e.g., via the postal service, to the providers of the virtual 
payment account system. Alternatively, funds transfer services and electronic bill 
payment services, such as CHECKFREE®, may be used. Reward points earned 
through use of the virtual payment account can also be applied to the buyer's virtual 
20 payment account to pay for products. 

More specifically, as shown in FIGURE 2, the buyer purchases goods, 
services, and/or premium content from a seller server 51, i.e., a computer owned by 
the seller which sponsors or sells the product, by placing an order with the seller 
server from a computer 50 connected to the Internet 40. The order is processed and 
25 confirmed by a commerce gateway 52 connected to a LAN 44 located elsewhere in 
the Internet 40. The commerce gateway 52 is also connected to a credit processing 
server 53 via the LAN 44. The credit processing server 53 communicates with one or 
more identity bureaus 56 to verify the identity of the buyer. After verifying the 
identity of the buyer the credit processing server 53 communicates with one or more 
30 credit bureaus 58 in order to determine the credit worthiness of a buyer. 

In one actual embodiment of the present invention described herein, the 
identity bureau 56 is a server provided and maintained by an agency for verifying the 
identity of the buyer and the credit bureau 58 is a server provided and administrated 
by a credit agency for processing credit reports for buyers. The identity bureau 56 
35 and credit bureau 58 can be located on the LAN 44 or elsewhere on the Internet 40. 
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In yet another embodiment, the credit processing server can establish a point- 
to-point connection with a remote identity bureau or credit bureau that is not 
connected to either the LAN 44 nor the Internet 40. It will be appreciated that other 
methods of communication between the credit processing server 53 and identity 
5 bureau 56 or credit bureau 58 may be used, for example, a secure Virtual Private 
Network (VPN) maintained and operated by the identity bureau or credit bureau 
exclusively for the purpose of identity checking or credit rating, respectively. 

Finally, in yet other embodiments, the identity and credit bureaus may not 
actually offer a server at all. Rather, a customer service representative for the identity 
10 or credit bureaus may process the identity or credit report and manually provide the 
report to an administrator of the present invention who manually enters the report to 
the credit processing server 53. 

The credit processing server 53 also communicates with one or more financial 
institutions 59 for the purpose of obtaining the buyer's payment, i.e., a transfer of 
15 funds for the purchase of products. As is the case with the identity and credit 
bureaus 58, the financial institutions 59 may be other servers in electronic 
communication with the credit processing server 53, customer service representatives 
in more traditional communication with the credit processing server 53, or some 
combination thereof. 

20 Finally, in addition to the commerce gateway 52, the LAN 44 includes an 

administrative computer 54 used to administer buyer and seller information and 
services provided by the commerce gateway 52 and credit processing server 53. 

In the exemplary embodiment of the present invention shown in FIGURE 2, 
the LAN 44 is insulated from the Internet 40 by a firewall 55 that tracks and controls 

25 the flow of all data passing through it. The firewall 55 protects the LAN 44 from 
malicious in-bound data traffic. The LAN 44 is a bus network interconnecting the 
various computers and servers. The LAN 44 shown in FIGURE 2 can be formed of 
various coupling media such as glass or plastic fiber-optic cables, coaxial cables, 
twisted wire pair cables, ribbon cables, etc. In addition, one of ordinary skill in the 

30 art will appreciate that the coupling medium can also include a radio frequency 
coupling media or other intangible coupling media. Any computer system or number 
of computer systems, including but not limited to workstations, personal computers, 
laptop computers, personal data assistants, servers, remote computers, etc:, that is 
equipped with the necessary interface hardware may be connected temporarily or 

35 permanently to the LAN 44, and thus, the Internet 40. However, if temporarily 
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connected via a telephone link to another device connected to the LAN 44, the 
interface hardware of both the remote computer 48 and the device to which it is 
connected must contain a modem. 

Also shown in FIGURE 2 is an exemplary authentication device 205 whose 
5 purpose will be described in more detail below. In one embodiment of the current 
invention, the authentication device may be a personal data assistant (PDA) with a 
wireless modem. However, those of ordinary skill in the art will appreciate that the 
authentication device may be a laptop computer, a cellular telephone, a pager or any 
device capable of receiving a remote message. 

10 Finally, those of ordinary skill in the art will recognize that while only one 

buyer computer 50, and one seller server 51 are depicted in FIGURE 2, numerous 
buyer computers and seller servers equipped with the hardware and software 
components described below may be connected to the Internet 40. It will also be 
appreciated that the term "buyer" used herein can be applied to any purchaser of 

15 goods and/or services and can be applied equally to an individual, non-commercial 
purchaser, a business or a commercial purchaser. In other words, the term "buyer" 
can apply to any purchaser and the term "seller" can apply to any vendor or merchant, 
be they on individual, non-commercial seller, a business or a commercial seller. 
Relevant Buyer Computer. Seller Server. Commerce Gateway, and Credit Processinp 

20 Server Components 

FIGURE 3 depicts several of the important components of the buyer's 
computer 50. Those of ordinary skill in the art will appreciate that the buyer's 
computer 50 could be any computer used by the buyer to utilize the buyer's virtual 
payment account Additionally, those of ordinary skill in the art will appreciate that 

25 the buyer's computer 50 may include many more components then those shown in 
FIGURE 3. However, it is not necessary that all of these generally conventional 
components be shown in order to disclose an illustrative embodiment for practicing 
the present invention. As shown in FIGURE 3, the buyer's computer includes a 
network interface 60 for connecting to a LAN 44 or WAN 46, or for connecting 

30 remotely to a LAN or WAN. Those of ordinary skill in the art will appreciate that the 
network interface 60 includes the necessary circuitry for such a connection, and is . 
also constructed for use with the TCP/IP protocol, the particular network 
configuration of the LAN or WAN it is connecting to, and a particular type of 
coupling medium. 
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The buyer's computer 50 also includes a processing unit 61, a display 62 and a 
memory 63. The memory 63 generally comprises a random access memory (RAM), 
a read-only memory (ROM) and a permanent mass storage device, such as a disk 
drive. The memory 63 stores the program code and data necessary for ordering and 
paying for a product over the Internet 40 in accordance with the present invention. 
More specifically, the memory 63 stores a Web browser component 64, such as 
NETSCAPE NAVIGATOR® or MICROSOFT® Internet Explorer, and a buyer 
authenticator component 65 formed in accordance with the present invention for 
authenticating a buyer as a registered participant of the virtual payment system prior 
to performing any virtual payment account transactions. It will be appreciated that 
these components may be stored on a computer-readable medium and loaded into 
memory 63 of the buyer computer 50 using a drive mechanism associated with the 
computer-readable medium, such as a floppy or DVD/CD-ROM drive. 

As will be described in more detail below, the products ordered by the buyer 
15 are supplied by a seller server 51, described next, following authorization from a 
remote server, i.e., a commerce gateway 52 described later, located elsewhere on the 
Internet, e.g., on LAN 44 illustrated in FIGURE 2. FIGURE 4 depicts several of the 
important components of the seller server 51. Those of ordinary skill in the art will 
appreciate that the seller server 5 1 includes many more components than those shown 
in FIGURE 4. However, it is not necessary that all of these generally conventional 
components be shown in order to disclose an illustrative embodiment of practicing 
the present invention. As shown in FIGURE 4, the seller server 51 includes a 
network interface 70 for connecting to a LAN 44 or WAN 46, or for connecting 
remotely to a LAN or WAN. Those of ordinary skill in the art will appreciate that the 
25 network interface 70 includes the necessary circuitry for such a connection, and is 
also constructed for use with the TCP/IP protocol, the particular network 
configuration of the LAN or WAN it is connecting to, and a particular type of 
coupling medium. 

The seller server 51 also includes a processing unit 71, a display 72 and a 
30 memory 73. The memory 73 generally comprises a random access memory (RAM), 
read-only memory (ROM), and a permanent mass storage device, such as a hard disk 
drive, tape drive, optical drive, floppy disk drive, or combination thereof. In one 
actual embodiment of the present invention, the memory contains a product 
database 74 that includes the electronically stored good or service ordered by the 
35 buyer. In other embodiments of the present invention, the product database 74 stores 
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the premium content ordered by the buyer, i.e., the hypertext documents or other 
electronically stored information considered of monetary value by the seller. In yet 
other embodiments of the present invention, the goods may be tangible goods not 
capable of being electronically stored, in which case the product database includes 
descriptive information of the products. 

The memory 73 also contains a commerce engine component 75 for 
purchasing a product from a seller Web site. The commerce engine component 75 
may be an existing commerce engine, such as MICROSOFT® Site Server, which 
allows for the payment of products ordered over the Internet using a major credit 
card, eg., VISA® or MASTERCARD®. A commerce gateway adapter 
component 76 is also provided to allow the commerce engine component 75 to 
interface with the commerce gateway 52. The commerce gateway adapter component 
uses and provides application programming interface (API) calls to interface with the 
commerce engine 75. Also included in memory is a seller authenticator 
component 77 for verifying that the seller is an authorized or registered seller of the 
virtual payment system of the present invention. It will be appreciated that the 
product database 74, the commerce engine component 75, the commerce gateway 
adapter component 76 and the seller authenticator component 77 may be stored on a 
computer-readable medium and loaded into memory 73 of the seller server 51 using a 
drive mechanism associated with the computer-readable medium, such as a floppy or 
CD-ROM drive. Finally, memory 73 stores a Web server component 78 for handling 
requests for stored information received via the Internet and the WWW. 

FIGURE 5 depicts several of the important components of the commerce 
gateway 52. Those of ordinary skill in the art will appreciate that the commerce 
gateway 52 includes many more components than those shown in FIGURE 5. 
However, it is not necessary that all of these generally conventional components be 
shown in order to disclose an illustrative embodiment for practicing the present 
invention. As shown in FIGURE 5, the commerce gateway 52 is connected to the 
LAN 44 via a network interface 80. Those of ordinary skill in the art will appreciate 
that the network interface 80 includes the necessary circuitry for connecting the 
commerce gateway 52 to the LAN 44 and the firewall 55, and is constructed for use 
with the TCP/IP protocol, the particular network configuration of the LAN 44, and 
the particular type of coupling medium. 

The commerce gateway 52 also includes a processing unit 81, a display 82 
and a memory 83. The memory 83 generally comprises a random access memory 
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(RAM), a read-only memory (ROM), and a permanent mass storage device, such as a 
hard d.sk drive, tape drive, optical drive, floppy disk drive, or combination thereof 
The memory 83 stores the program code and data necessary for authorizing a seller 
server 51 to supply products to buyers and obtaining payment for the products via a 
cred,t processing server 53 in accordance with the present invention More 
specifically, the memory 83 stores a transaction server component 84 formed in 
accordance with the present invention for authorizing a seller to supply the ordered 
product and obtaining payment for the ordered product from the credit processing 
server 53. Memory 83 also contains an identity bureau adapter 79 formed in 
accordance with the present invention for verifying a buyer or seller's identity. Also 
stored m memory 83 is an enrollment server component 89 formed in accordance 
with the present invention for determining the credit worthiness of an applicant. An 
account identification container generator component 88 is also stored in memory 83 
for determining an internal account identification. A report server 85 is also stored in 
memory 83 for processing request for reports and consolidating information for 
requested reports. Also stored in the memory 83 is a credit processing server adapter 
component 86 for communicating with a credit processing server 53 described below. 
It will be appreciated that the transaction server component 84, the credit processing 
server adapter component 86, the account identification container generator 
component 88, and the enrollment server component 89 may be stored on a 
computer-readable medium and loaded into memory 83 of the commerce gateway 52 
using a drive mechanism associated with the computer-readable medium, such as 
floppy or CD-ROM drive. The memory 83 also stores a Web server component 87 
for handling requests for stored information received via the Internet 40 and the 
25 WWW. 

FIGURE 6 depicts several of the important components of the credit 
processing server 53. Those of ordinary skill in the art will appreciate that the credit 
processing server 53 includes many more components than those shown in 
FIGURE 6. However, it is not necessary that all of these generally conventional 
components be shown in order to disclose an illustrative embodiment for practicing 
the present invention. As shown in FIGURE 6, the credit processing server 53 is 
connected to the LAN 44 via a network interface 90. Those of ordinary skill in the 
art will appreciate that the network interface 90 includes the necessary circuitry for 
connecting the credit processing server 53 to the LAN 44 and the firewall 55, and is 
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constructed for use with the TCP/IP protocol, the particular network configuration of 
the LAN 44, and the particular type of coupling medium. 

The credit processing server 53 also includes a processing unit 91, a 
display 92 and a memory 93. The memory 93 generally comprises a random access 
5 memory (RAM), a read-only memory (ROM), and a permanent mass storage device, 
such as a hard disk drive, tape drive, optical drive, floppy disk drive, or combination 
thereof. The memory 93 stores the program code and data necessary for authorizing 
and securing payment for products purchased using a virtual payment account in 
accordance with the present invention. More specifically, the memory 93. of the 

10 credit processing server stores credit processing sub-systems including: an 
account/billing sub-system 94 for billing a buyer for products purchased using a 
virtual payment account; a payment processing sub-system 95 for communicating 
with a financial institution 59 in order to process payments received for purchases 
made using a virtual payment account; and an account enrollment sub-system 96 for 

15 determining the credit limit for an applicant as determined by information received 
from one or more credit bureaus 58. 

Also stored in memory 93 are an account database 97 and a financial 
database 98 used to store data required for the account/billing sub-system 94, the 
payment processing sub-system 95, identity bureau adapter 99 and the account 

20 enrollment sub-system 96 to perform their required functions. It will be appreciated 
that the account/billing sub-system 94, the payment processing sub-system 95, the 
account enrollment sub-system 96, the account database 97, identity bureau adapter 
99 and the financial database 98 may be stored on a computer-readable medium and 
loaded into memory 93 of the credit processing system using a drive mechanism 

25 associated with the computer-readable medium, such as floppy or DVD/CD-ROM 
drive. It will also be appreciated that the account/billing sub-system 94, the payment 
processing sub-system 95, and the account enrollment sub-system 96 can comprise, 
either in full or in part, existing, traditional credit card payment systems. 

FIGURES 3-6 depict important components of the buyer computer 50, seller 

30 server 5 1 , commerce gateway 52 and credit processing server 53 shown in FIGURE 2 
of one embodiment of the present invention. It will be appreciated that many other 
implementations and variations are possible. For example, one or more of the credit 
processing sub-systems 94, 95, 96 could be included in the commerce gateway 52 
instead of in the credit processing server 53. Alternatively, each of the credit 

35 processing sub-systems 94, 95, 96 of the credit processing server could be in a 
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separate server. Further, additional commerce gateways 52 and credit processing 
servers 53 may be located on the LAN 44 or elsewhere on the Internet 40. 

Applying for a Virtual Payment Account 
Once a virtual payment account is set up, the virtual payment system of the 
present invention is a closed system that provides buyers a secure method for 
purchasing products over the Internet. The closed system includes only a registered 
buyer's computer 50, a registered seller server 51, the commerce gateway 52 
(administered by the provider of the virtual payment system) and the credit 
processing server 53 (which can also be administered by the provider of the, virtual 
payment system). Since the account information necessary for charging the buyer for 
the purchase is already in the possession of the commerce gateway 52 and the credit 
processing server 53, the closed system of the present invention allows registered 
buyers to purchase products from registered sellers without transferring sensitive 
account information to the sellers over the Internet. In order to become a member of 
1 5 the virtual payment system of the present invention, a buyer becomes a registered 
user by obtaining a virtual payment account. FIGURE 7 illustrates the actions taken 
by the buyer's computer 50, the commerce gateway 52, the credit processing 
system 53, and the credit bureau 58 to create a virtual payment account for a buyer. 
The interactions of the various components are illustrated and described in detail later 
20 for various transactions performed by the present invention with reference to the 
diagrams shown in FIGURES 12, 27 and 42. As shown in FIGURE 7, the process of 
applying for a virtual payment account is initiated when a buyer requests 100 an 
application form via the Internet using the Web browser 64 installed on the buyer's 
computer 50. The buyer may apply for a virtual payment account directly from a 
25 virtual payment account Web site located at the commerce gateway 52 or indirectly 
from a registered seller site located at the seller server 51. Once the request 100 for 
the application form is received by the commerce gateway 52, the commerce 
gateway 52 provides buyer computer 50 the application form 102 so that the buyer 
can complete the form displayed in the Web browser 64 of the buyer computer 50. 
30 Upon completion of the application form, the buyer computer 50 submits the 

completed application form 104 to the commerce gateway 52. The commerce 
gateway 52 then submits the application data 106 from the completed form to the 
credit processing server 53 for account and credit limit authorization. The credit 
processing server 53 verifies the application data by requesting identity 
35 information 1 16 from an identity bureau 56. The identity bureau provides the 
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requested identity information 118 and if the provided identity information 
corresponds to the application data then the credit processing server 53 requests 
credit information 108 about the buyer from a credit bureau 58. However, in one 
actual embodiment of the present invention, if the application data does not conform 
to the identity information from the identity bureau 56, then no virtual payment 
account is created and the application is forwarded to customer service for review for 
possible fraud detection. As noted above, in the actual embodiment of the present 
invention, the identity bureau 56 is a server provided and maintained by an agency for 
verifying identity and the credit bureau 58 is a server provided and administrated by a 
credit agency for processing credit reports. Hence, the credit processing server 53 
requests the desired identity and credit information electronically, e.g., via 
appropriate database queries, etc., from the identity bureau 56 and credit bureau 58. 

Returning to the illustrated embodiment, the credit bureau 58 provides the 
requested credit information 1 10 to the credit processing server 53 via the connection 
with the credit processing server 53. The credit processing server 53 then evaluates 
the application, identity and credit information by combining the identity information 
from the identity bureau and the credit information received from the credit bureau 58 
with application data in order to determine a credit score 111. If the score exceeds a 
certain threshold, a credit limit is set and the virtual payment account is created 112. 
20 If the score falls below the threshold, a virtual payment account may still be 
created 1 12, however, all purchases must be prepaid, and the account information is 
forwarded to a customer service representative for review for a possible later grant of 
credit. 

Once the virtual payment account is created, the credit processing server 53 
returns the result of the evaluation 113, e.g., approval/denial, prepaid account only, 
credit limit, etc., to the commerce gateway 52. The commerce gateway then 
requests 120 that the buyer authenticator 65 on the buyer computer generate a public 
key encryption key pair 122 comprising a secret key and a public key. The buyer 
authenticator 65 then submits the public key to the commerce gateway 124. The 
30 commerce gateway 52 digitally signs the public key to generate a digital 
certificate 126. As will be appreciated by those of ordinary skill in the art, a digital 
certificate comprises a public key digitally signed by a trustworthy entity. The 
commerce gateway 52 sends the digital certificate and an application result page 1 14 
to the buyer computer 50 for display via the buyer computer's Web browser 64. 



25 



WO 00/79452 PCT/USOO/16669 

-17- 



15 



Finally, the buyer computer stores the digital certificate 128 for use later with the 
virtual payment account. 

It will be appreciated that the digital certificate may be stored in the 
memory 63 of the buyer computer 50, or on some form of device capable of 
5 interfacing with the buyer computer such as but not limited to a secure token, smart 
card or as an encrypted file on some other computer readable medium. It will be 
appreciated by those of ordinary skill in the art that the order of the operations in 
FIGURE 7 may be altered without substantially affecting the operation of the present 
invention. For example, the buyer may be notified of the application results, before 
1 0 generating the public key encryption pairs. 

FIGURES 8A-8G are exemplary Web pages provided to the buyer by the 
Web browser 64 of the buyer computer 50 in connection with applying for a virtual 
payment account as described above. Using the Web page 600 shown in 
FIGURE 8A, the buyer selects the type of virtual payment account they desire to 
apply for, e.g., credit or prepaid, and submits the information by clicking "continue." 
Next, the Web pages 605, 610 and 615 shown in FIGURES 8B-8D for the application 
form are displayed to the buyer via the Web browser 64. In one actual embodiment 
of the present invention, the buyer fills out the application form with the appropriate 
application data on-line. Alternatively, the buyer can request the application on a 
printed form and submit the printed form via facsimile or regular mail, in which case 
a customer service representative will enter the information into the account 
database 97 of the credit processing server 53 via the administrative user 
computer 54. The application data includes information such as social security 
number and income that will be used to determine a credit limit for the buyer. 
Information entered by the buyer in the application form is also used for demographic 
purposes. For example, banner advertisements can be displayed via the Web 
browser 64 on the buyer computer 50 and can be targeted to the buyer based on 
demographic information, such as the buyer's age and geographic location. 

After the buyer completes the application form contained in the Web pages, 
605, 610 and 61 5 shown in FIGURES 8B-8D and the application is processed by the 
credit processing server 53, a Web page 620 as shown in FIGURE 8E is transferred 
to and displayed by the buyer computer's Web browser 64, which notifies the buyer 
of the results of the application process, i.e., account approval and details of his or 
her virtual payment account, including the account credit limit. Once the account 
approval is complete and the account accepted by the buyer, the commerce 
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gateway 52 then transmits the buyer authenticator component 65 (which, as described 
above, generates a public key encryption key pair) to the buyers computer for 
installation as shown in FIGURE 8F. FIGURE 8G shows an exemplary Web 
page 630 that allows the buyer to activate their virtual payment account. 

Customizing and Modifvinp a V irtual Payment Arrmmt 
Once a virtual payment account has been approved and a credit limit set as 
described above, the account can be customized by the buyer. Account information 
is then stored in the account database 97 of the credit processing server 53. 
FIGURES 9A-9C illustrate an exemplary set of Web pages downloaded from the 
commerce gateway 52 and displayed by the Web browser 64 of the buyer's 
computer 50 for customizing the buyer's virtual payment account. FIGURES 9A-9B 
illustrate Web pages 640 and 645 for main account customization. As shown in 
FIGURE 9 A, the buyer may customize his or her virtual payment account contact 
information and preferences. FIGURE 9B illustrates that the main account holder is 
15 able to configure access controls for their account and all sub-accounts as shown in 
Web page 645. 

As shown in FIGURE 9C, the buyer may also customize sub-accounts for his 
or her own use, or for use by a business partner, spouse and/or children. As will be 
described in more detail below, the buyer may then impose his or her own spending 

20 limits on the sub-accounts. In one actual embodiment, reward points accrue in the 
main account so that the buyer can transfer the reward points to sub-accounts. It will 
be appreciated that in other embodiments, reward points could accrue to individual 
sub-accounts, if the buyer so desires. Reward or reward points can later be used, for 
example, to make a payment for a purchase, to receive seller discounts, to purchase 

25 frequent flyer miles, etc. It will be appreciated by those of ordinary skill in the art 
that reward points can be earned by the buyer and applied to his or her virtual 
payment account in a myriad of different ways. 

It will also be appreciated that a similar process is performed for a seller to 
become an authorized or registered seller. In one embodiment, a seller can apply to 

30 become a participant by completing an application form on-line. In another 
embodiment, a seller applies to become a participant of the. system using a more 
traditional manual application procedure. In yet another embodiment, some 
combination of an on-line and manual process is used. It will be appreciated that if 
the seller application process is performed in whole or in part on-line, a Web browser 

35 component (not shown in FIGURE 4) is used to display Web pages on the seller's 
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computer display 72. The seller forms a contract with the provider of the commerce 
gateway 52. In one exemplary embodiment, this contract includes terms such as the 
billing period and the fee that will be paid to the commerce gateway provider. Since 
a seller is selling a product to a buyer who has . a virtual payment account, the seller 
will not have sub-accounts in the same sense that a buyer has sub-accounts. 
However, a seller selling different types of data can have different accounts. For 
example, a book store may have a general account and one or more restricted 
accounts, for example, the restricted accounts may prohibit sales of adult products to 
minors. This can be in the form of a rating system (e.g., G, PG, PG13, NCI 7, R, 
etc.). In a similar manner to the buyer application process, once a seller has been 
approved and the seller account customized, a digital certificate is installed on the 
seller's computer 51 to identify the seller as a registered seller in the virtual payment 
system. The digital certificate is used in combination with a secret key generated by 
the seller server 5 1 and a public key generated by the seller server and sent to the 
1 5 gateway 52 to encrypt/decrypt messages for greater security. 

It will be appreciated, as described earlier, that a seller can apply for a "buyer" 
account. In other words, a seller can purchase products as the owner of a virtual 
payment account. 

Digital Security 

20 The illustrated embodiment also allows a buyer to create a custom package of 

sub-accounts. As will be readily recognized by those of ordinary skill in the art, the 
buyer may be provided with any number, type or combination of sub-accounts 
depending on the desires of those providing and administrating the virtual payment 
system of the present invention. 

25 The buyer can add sub-accounts (e.g., supplemental users, young shoppers, 

etc.) via the Web pages 650 shown in FIGURE 9C. Sub-accounts can be customized 
for young shoppers as shown in FIGURE 9C, for example, by setting spending limits 
for the young shopper and identifying only those seller Web sites from which the 
young shopper can purchase products. 

30 As will be described in more detail below, once the virtual payment account 

has been authorized 1 14 and customized, a digital certificate is transferred by the 
commerce gateway 52 and installed 128 on the buyer computer 50. The digital 
certificate is then used in subsequent transactions as a unique credential to identify 
the buyer as a registered holder of a virtual payment account. In an actual 

35 embodiment of the present invention, a buyer or seller is identified as a registered 
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user of the virtual payment system by the commerce gateway 52 verifying the 
commerce gateway's digital signature on the digital certificate associated with the 
buyer's virtual payment account 

It will be appreciated that several levels of security can be imposed on on-line 
5 transactions. Moving from the lowest level to the highest level, there can be: (1) no 
security restrictions imposed; (2) minimal security, such as account name and 
password verification; (3) intermediate security, such as a digital certificate or secret 
key; (4) high security, such as a transaction signed with a digital signature using the 
buyer's secret key; or (5) maximum security, such as a digital signature and additional 
10 access controls, such as an account number, a last purchase verification, smart cards, 
secure tokens or some combination thereof. As will be described later, in the actual 
embodiment of the virtual payment system described herein, the term "digital 
certificate" is used to describe the authorization used; however, it will be appreciated 
that a higher level of security such as a digital signature, or a digital signature with 
additional access controls may be desired in order to ensure the highest level of 
security for all parties involved (i.e., the buyer, the seller, the commerce gateway, and 
the credit processing server) in virtual payment account transactions. 

In one exemplary embodiment of the security transaction, the seller server 51 
digitally signs a purchase offer with a certificate issued by the commerce gateway 52 
20 and sends it to the buyer computer 50; the buyer computer 50 digitally signs the 
purchase offer with a certificate issued by the commerce gateway 52 and sends it 
back to the seller server 51; the seller server 51 then forwards the doubly signed 
purchase offer to the commerce gateway 52; the commerce gateway 52 verifies both 
signatures and if they are both valid and the transaction is permissible then signs the 
25 doubly signed offer and returns the resulting triply signed purchase offer to the seller 
server 51; the seller server verifies the commerce gateway's 52 signature, and if it is 
valid, then the purchase transaction is complete. In the aforementioned example, the 
seller server 5 1 may notify the buyer computer 50 or they may not. 

Ordering Products 

30 Once a buyer has created and customized his or her virtual payment account, 

he or she can immediately order products via the Internet if he or she was granted 
credit during the account application process. If, however, the buyer's virtual 
payment account is only a prepaid account, prepayment must be made before the 
buyer can order products. In an alternate embodiment, the buyer with only a prepaid 

35 account can order products, however, shipment of the product will be held until the 
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prepaid account is sufficiently funded to cover the purchase. More specifically, this 
would allow any registered buyer to have a form of "digital layaway" and by ordering 
products directly from the Web site of any registered seller. It will be appreciated 
that in yet another embodiment, buyer and seller will use the same type of virtual 
payment accounts and that any buyer can therefore act as a seller and vice versa. 
Additionally, it will be appreciated that a seller can be an auction Web site, in which 
a buyer uses his or her virtual payment account to pay for the goods, services and/or 
content purchased from the auction Web site. 

In one actual embodiment of the present invention depicted in 
10 FIGURES 11 A- 1 1 C, the buyer may "surf the Web" and visit a registered seller's Web 
site, such as "Virtual Store," 1 100 using the Web browser 64. Once the buyer visits a 
registered seller's Web site, the buyer may order and pay for products offered from 
that Web site using his or her virtual payment account. More specifically, a buyer 
using buyer computer 50 and Web browser 64 may retrieve the Web page 1100 
15 shown in FIGURE 11A from the seller Web site fictitiously known as "Virtual 
Store." The buyer makes a selection of a particular product 1 105 by manipulating a 
graphics cursor with a pointing device, such as a mouse above the selection 1 1 10 and 
"single-clicking." It will be appreciated that other pages, for example, a query page 
in which the buyer requests products by a keyword, may be displayed. It will also be 
20 appreciated that the Web page 1 100 shown in FIGURE 1 1A is a simplified example. 
It is common for a seller site to allow a buyer to select multiple products and place 
them in a "shopping cart." The buyer can then view the items in the cart and, if 
desired, remove items from the cart. Once the buyer has selected the desired items 
for purchase, the buyer indicates a desire to purchase the selected items, for example, 
by clicking an "OK" or a "Buy" button. In the simplified example shown in 
FIGURE 11 A, the buyer selects an item, such as the Virtual Store Personal 
Computer 1105 and presses the "Order" button 1110 to initiate the purchase 
transaction. 

After initiating the purchase transaction, the seller server 51 provides the Web 
browser 64 of the buyer's computer 50 with the Web page 1150 shown in 
FIGURE 1 IB which requests shipping information 1160, such as a street address, 
from the buyer. Additionally the Web Page 1 150 includes various payment options, 
i.e., major credit cards, such as VISA® or MASTERCARD®, with electronic 
transmission of credit information. In accordance with the present invention, a 
35 virtual payment account option is also displayed as a payment option for registered 
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sellers. After entering the shipping and payment information 1 160 and selecting the 
virtual payment option 1 155, the buyer can continue by clicking on the "Purchase" 
option 1165. In an actual embodiment of the present invention the buyer 
authenticator 65 displays a window 1 170 requesting the buyer to select their choice of 
5 accounts 1172, along with an authenticating pass phrase 1175. After selecting an 
account and entering the correct pass phrase, the buyer clicks "Continue'' 1177 to 
proceed with the purchase. In response, the seller server 51 calculates the total cost 
of the order, including tax and shipping and handling, and the buyer is presented with 
a confirmation screen 1180 as shown in FIGURE 1 1C. After authorizing the 
10 purchase, the buyer may be presented with a payment confirmation screen 1 185 as 
shown in FIGURE 1 ID. Additionally, the buyer may be presented with an order 
confirmation screen 1 190 as shown in FIGURE 1 IE. 

FIGURE 12 illustrates the logic implemented by the Web browser 64 
installed on the buyer computer 50 when the virtual payment account option 1 155 is 
1 5 selected. The logic begins in a block 220 and proceeds to a block 222 where a secure 
connection between the buyer computer 50 and commerce gateway 52 is established. 
In an actual embodiment of the present invention, the Secure Socket Layer (SSL) 
protocol is used for establishing a secure connection. SSL uses public key encryption 
incorporated into a Web browser, such as NETSCAPE NAVIGATOR® Web 
browser and Netscape's commerce servers, to secure the information being 
transferred over the Internet. The logic then proceeds to a block 224 where a buyer 
authenticator component 65 on the buyer computer 50 is executed. It will be 
appreciated that the buyer authenticator component 65 can also be included, in part or 
in whole, in the Web browser 64. The buyer authenticator component 65 is shown in 
25 more detail in FIGURE 1 3 and described next. 

The buyer authenticator 65 determines whether a buyer is a registered holder 
of a virtual payment account or put another way, a registered participant in the closed 
virtual payment system of the present invention. The logic of FIGURE 13 begins in a 
block 243 and proceeds to a block 244 where an authentication request and container 
30 are received from the Web browser 64. The container includes: transaction 
information, such as purchase detail; identification of the parties, such as a buyer 
identification which identifies the buyer, e.g., the digital certificate previously issued 
to the buyer when he or she created the virtual payment account as.described above; 
and a seller identification, e.g., the digital certificate issued to the seller upon creation 
35 of a seller account; and context, such as transaction date and time. It will be 
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appreciated that the container is initially empty, and data is then added to the 
confer by various components. As stated earlier, embodiments of the invention 
implement the buyer authenticator 65 in the Web browser 64. In one actual 
embodiment, the buyer authenticator 65 is an applet operating from within the Web 

browser 64. 

Next, in decision block 246, a test is made to determine if a digital certificate 
.s installed on the buyer computer 50. The digital certificate may be stored in the 
buyer computer 50 memory 63 or one some other device associated with the buyer 
computer such as a secure token, a smart card or encrypted on some computer 
readable medium^ ,t will be appreciated that other methods of digital identification 
can be used. ,f the digital certificate is installed, the digital certificate identification 
>s mserted into the authentication container and the authentication request and 
container are returned to the Web browser in blocks 248 and 250. The container can 
be any one of a variety of data formats, for example, one embodiment of the present 
invention a proprietary protocol is used. In an actual embodiment of a present 
invention, a public key generated by the buyer's computer and signed by the 
commerce gateway (thereby forming a digital certificate) is also inserted into the 
container The secret key is never transmitted anywhere in the virtual payment 
system of the present invention. The combination of the secret key and the digital 
certificate provides a heightened level of security to the buyer authentication process 
A digital signature is generally a document that has been encrypted by the secret key 
of a public key pair. Only the pub.ic key of the same key pair will be able to decrypt 
the document to its original form. This is particularly useful in demonstrating that 
only the. holder of the secret key is able to sign (encrypt) the document. In practical 
terms, signing a large document using public key cryptography can be very time 
consuming. Almost equally effective is creating a cryptographic message digest of 
the document and then encrypting the digest with the secret key. Therefore those of 
ordmary skill in the art will appreciate that anyone knowing the corresponding public 
key and the digest algorithm will be able to verify that the message was not altered 
and that it originated from the holder of the corresponding secret key. It will be 
appreciated that the digital certificate as used herein refers to an authentication 
identifier that is recognized by the provider of the virtual payment account that 
adheres to the provider's non-repudiation purchase policies. 

If however, in decision block 246 it is determined that a digital certificate is 
not mstalled on the buyer computer 50, the logic proceeds to a decision block 252 
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where a test is made to determine if "certificate not present" processing should be 
performed. Certificate not present processing allows a buyer to manually enter 
identification information when a digital certificate is not present. The identification 
information can include information such as an e-mail address, a password and 
5 personal information, for example, a mortgage payment amount. If the result of 
decision block 252 is positive, the logic proceeds to an alternate authentication in 
block 254. The alternate authentication is shown in more detail in FIGURE 14 and 
described next. 

The logic of FIGURE 14 begins at a block 1401 and proceeds to block 1405 
10 where the authorization options are displayed to the buyer. Next, it is determined in a 
block 1410 if the buyer requested an authorization code as the alternate authorization 
mechanism. If the buyer did choose to receive an authorization code, then the Web 
browser 64 on the buyer computer is sent an authorization code entry form in a block 
1415 and the authorization code is sent to an authentication device in a block 1420. 
15 Exemplary authentication devices 2800 or 2900 are shown in FIGURES 28 and 29 
respectively. After receiving the authorization code, the buyer enters the code in the 
authorization code entry form in a block 1425. 

If however at block 1405 the buyer decides not to request an authorization 
code, then from block 1410 the logic flows to a block 1450 where an interactive 
20 authentication Web form 3000 is sent to the Web browser 64 on the buyer's 
computer 50. An exemplary interactive authentication Web form 3000 is shown in 
FIGURE 30. Next in a block 1455 the buyer completes the interactive authentication 
Web form 3000. 

Next, the completed authorization entry form from block 1425 or 1455 is 
25 transmitted to the commerce gateway 52 in a block 1430. The logic then proceeds to 
a block 1435 where it is determined whether the authentication was successful. If the 
authentication was successful the logic ends at a block 1498 returning a successful 
authentication. If the authentication was unsuccessful the logic ends at a block 1499 
returning an unsuccessful authentication. 
30 Returning to FIGURE 1 3 the logic then moves to a block 256 where the 

information from the alternate authentication process is passed back through the 
buyer authenticator 65 and the logic ends at block 262. If there is no digital 
certificate installed ("No" in decision block 246) and certificate not present 
processing is not going to be performed, for example by a user selecting 
35 "cancel" 3010 in the certificate not present authorization Web page 3000 shown in 
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FIGURE 30 (or "No" in decision block 252), the buyer likely does not have a virtual 
payment account. Accordingly, the logic of FIGURE 1 3 proceeds to a decision 
block 258 where a test is made to determine if the buyer wishes to apply for a virtual 
payment account. If the buyer wishes to apply for a virtual payment account, the 
logic proceeds to a block 260, in which the buyer is allowed to apply for a virtual 
payment account as shown in FIGURE 15 and described next. Otherwise, the buyer 
authenticator 65 returns an unsuccessful authorization message to the Web 
browser 64 in a block 261 and the logic ends in block 262. 

FIGURE 15 illustrates the logic implemented by the Web browser 64 when a 
buyer applies for a virtual payment account. It will be appreciated that applying for a 
virtual payment account can be invoked by a buyer requesting an account directly 
from the commerce gateway 52 or by a buyer who is not registered attempting to 
order a product from a registered seller. In either case, the logic for applying for a 
virtual payment account via a Web browser 64 begins in a block 270 and proceeds to 
15 a block 272 where a request for an application form is received by the Web 
browser 64. Next in a block 273, the request for an application form is sent to the 
Web server component 87 of the commerce gateway 52, The requested application 
form is then received from the Web server component 87 of the commerce 
gateway 52 and displayed in the buyer's Web browser in a block 274. 
20 Next, in a block 275, the completed account application form is sent to the 

commerce gateway 52 and processed by an enrollment server component 89 as 
shown in FIGURE 16, and described next. In another embodiment, the account 
application is sent to the transaction server component 84 that handles financial 
transactions and also handles non-financial transactions, such as enrollment. 
25 The logic of the enrollment server 89 shown in FIGURE 16 begins in a 

block 280 and proceeds to a block 282 where a completed application form is 
received from the Web browser. Next, in a block 283 identity information, such as 
name, employer, current residence, etc., is requested from an identity bureau 56 via 
the identity bureau adapter 79 whose logic is shown in FIGURE 27 and described 
30 next. 

Accordingly, the logic of FIGURE 27 begins in a block 2705 and proceeds to 
a block 2710 where the identity request is received. The request is then formatted to 
be compatible with the particular identity bureau in a block 2715. Next, the logic 
proceeds to a block 2720 where the formatted request is then sent to identity 
35 bureau 56. The result of the request is received from the identity bureau in a 
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block 2725. Next, in a block 2730, the result is then returned to requester The logic 
of FIGURE 27 then ends in a block 2735. 

Returning to FIGURE 16, if in a block 284, which in this case is the 
enrollment server 89, it is determined that the identity information received from the 

5 identity bureau 56 via the identity bureau adapter 79 corresponds to the information 
in the application received in block 282, then processing continues to a block 285 
where the enrollment server requests credit information, such as income, length of 
time with current employer, length of time at current residence, etc., from a credit 
bureau 58 via the credit processing server adapter 86 as shown in FIGURE 21 and 

1 0 described later with reference to a purchase authorization request. 

Upon receipt of the credit information, the logic proceeds to a block 286 
where the application is scored based on the identity bureau information and credit 
bureau information in combination with internal criteria. The internal criteria 
provide a score for the various pieces of credit information. For example, incomes 

15 will be broken down into ranges, with a point value assigned to each range. 
Similarly, point values will be assigned based on the time the applicant has lived at 
his or her current residence, etc. The points for each piece of credit information are 
combined to determine a score for the applicant. The score equates to the credit 
worthiness of the buyer and is used to determine if the applicant will receive a credit 

20 account, or if the score falls in an intermediate range, a prepaid account, and if so, to 
establish a credit limit for the applicant, i.e., buyer. Next, if the score is above a 
threshold logic ends with a successful enrollment result returned to the Web browser 
in a block 288. However if the score is below a certain threshold or if the identity 
information provided by the identity bureaus 56 does not correspond to that of the 

25 buyer's application, then an unsuccessful result is returned in a block 289. Processing 
then returns to FIGURE 15. 

In FIGURE 15, once a response is received from the enrollment server 89 a 
block 265 examines whether an account was created. If it was then a request is sent 
to the buyer computer 50 to generate a public key encryption pair in block 267 and to 

30 submit the public key to the enrollment server 89 on the commerce gateway 52. The 
enrollment server then signs the public key to create a digital certificate and returns a 
successful enrollment Web page 620, as shown in FIGURE 8E which is received in a 
block 276 along with the digital certificate in a block 278. If at block 265 it was 
determined that an account was not created then an unsuccessful application Web 

35 page is displayed (not shown) at a block 266. In the case of applying for a virtual 
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payment account, the result page 620 provides details of the new account for the 
buyer, or contains a message informing the buyer that there was an error creating the 
- account. The logic of FIGURE 15 of applying for a virtual payment account then 
ends in a block 279 and processing returns to FIGURE 13. 

5 Referring again to FIGURED, after the buyer has applied for a virtual 

payment account, the logic returns to decision block 246 where the test to determine 
if a digital certificate is installed on the buyer computer 50 is repeated. Depending on 
the results of decision block 246, either blocks 248-250 or blocks 252-256 are 
repeated for the recent applicant of a virtual payment account. The logic then ends in 

10 a block 262. 

While the logic of authenticating a buyer as shown in FIGURE 13 and 
described herein uses a digital certificate as the primary means for authenticating a 
buyer, it will be appreciated that other methods are possible. For example, a lesser 
level of security could be employed, whereby a user could be required to enter 
15 identifying information, such as the information entered in alternate authentication 
shown in FIGURE 14. Alternatively, a greater degree of security could be employed 
whereby a digital certificate is required, and "certificate not present" processing is not 
allowed. Or, an even greater level of security could be used requiring a digital 
signature and other verifying information from the buyer. 
20 Returning to FIGURE 12, after buyer authentication is completed in 

block 224, the logic proceeds to a decision block 226, where a test is made to 
determine if the buyer authentication was successful. If not, the logic proceeds to a 
block 227 where an error message is displayed on the buyer computer 50 by the Web 
browser 64 notifying the buyer of the failed authentication. The logic of FIGURE 12 
25 ends in a block 242. 

However, if the buyer was successfully authenticated, the logic proceeds to a 
block 228 where a virtual payment account selection Web page 1 1 70 as shown in 
FIGURE 1 IB is displayed. Included in the requested information of the virtual 
payment account selection Web page 1170 is an identification of the applicable 
30 account or sub-account to which the purchase should be applied. Next, in a 
block 230, sub-account and password information (used to unlock the buyer's digital 
certificate) are obtained from the buyer from the information entered in the virtual 
payment account selection Web page 1 170 of FIGURE 1 IB when the buyer indicates 
that the information has been entered by selecting "Continue" 1 1 77. The logic of 
35 FIGURE 12 then proceeds to a block 232 where the sub-account, and an 
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authentication container are sent to the commerce gateway 52 and processed by the 
account identification container generator 88 shown in FIGURE 17 and described 
next. 

The logic of FIGURE 17 begins in a block 800 and proceeds to a block 802 
5 where the sub-account and authentication container are received from Web 
browser 64 of the buyer computer 50. The logic then proceeds to a block 804 where 
an internal account identification associated with authentication container is 
determined. An empty account identification container is then created in a block 806. 
Next, in a block 808, internal account identification and sub-account information is 
10 added to the empty account identification container. The logic then proceeds to a 
block 810 where an internal digital signature is applied to the account identification 
container. For example, message digest logic can be used by applying an algorithm 
that takes a variable length message and produces a fixed length digest as output 
using a one-way hashing algorithm that establishes the message as cryptographically 
15 secure. Finally, the account identification container is returned to the Web 
browser 64 in a block 812. The logic of FIGURE 17 then ends at a block 814, and 
processing returns to FIGURE 12. 

Returning to FIGURE 12, after the sub-account and authentication container 
are sent to the commerce gateway 52, the logic then proceeds to a block 234 where 
20 the logic waits to receive the account identification container from the account 
identification container generator component 88 of the commerce gateway 52. Once 
the account identification container is received from the commerce gateway 52, the 
logic proceeds to a block 238 where a purchase request is sent to the commerce 
engine 75 in the form of a request and account identification container for processing 
25 as shown in FIGURE 18 and described next. 

The commerce engine 75 is the component of the seller server 51 that 
determines whether or not the order will be processed and whether the requested 
product will ultimately be provided to the buyer. It will be appreciated that 
commerce engines are well known in the art. The commerce engine component 75 
30 used in conjunction with the commerce gateway adapter component 76 allows the 
virtual payment system of the present invention to expand existing technology that is 
currently used for traditional credit systems to encompass the virtual payment 
account of the present system. It will be further appreciated that while the 
embodiment shown and described modifies the commerce engine to achieve this 
35 functionality (which may be possible through existing API calls of the commerce 
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engine), other embodiments are possible. This expanded commerce engine 
functionality is shown in FIGURE 18. 

The logic of FIGURE 18 begins in a block 300 and proceeds to a block 302 
where a purchase request and account identification container are received from the 
5 Web browser 64 of the buyer computer 50. The logic then proceeds to a decision 
block 304 where a test is made to determine whether the purchase request should be 
forwarded to the commerce gateway adapter 76. If the purchase request is to 
purchase products using a virtual payment account, the request should be forwarded 
to the commerce gateway adapter 76 for processing in accordance with the_ virtual 
10 payment system of the present invention. In another embodiment, only the request 
(without the account identification container) is received from the Web browser in 
block 302, and if it is determined in decision block 304 that the purchase request 
should be forwarded to the commerce gateway adapter 76, the account identification 
is then obtained from the Web browser 64. In either case, if it is determined in 
15 decision block 304, that the purchase request should be forwarded to the commerce 
gateway adapter 76, the logic proceeds to a block 306 where the request is forwarded 
to the commerce gateway adapter. The commerce gateway adapter 76 is shown in 
more detail in FIGURE 19 and described next. 

The commerce gateway adapter 76 is a component residing on the seller 
20 server 51 that allows the seller server to communicate directly with the transaction 
server component 84 of the commerce gateway 52 in order to expand the 
authorization function of the commerce engine 75 to include virtual payment account 
transactions. Accordingly, the logic of FIGURE 19 begins in a block 330 proceeds to 
a block 332 where the forwarded purchase request and account identification 
25 container are received from the commerce engine 75. Next, in a block 334 the 
purchase request and account identification container are sent to the transaction 
server 84 in the form of a transaction request for further processing as shown in 
FIGURE 20 and described next. 

The transaction server component 84 of the commerce gateway 52 is 
30 responsible for interfacing with the other components of the system and determining 
whether or not a requested transaction should be applied to a buyer's virtual payment 
account. The logic of FIGURE 20 begins in a block 350 and proceeds to a block 352 
where the transaction request is received. Next, in a block 353 the account 
identification container is decoded and verified. The origin or source of the request 
35 as well as the context, i.e., date and time, of the request are then recorded in 



WO 00/79452 



-30- 



PCT/US0O/ 16669 



memory 83 of the commerce gateway 52 in a block 354. Next, the logic proceeds to 
a decision block 356 where a test is made to determine whether the requested 
-transaction is permissible. A variety of factors can be considered in making the 
determination of whether a requested transaction is permissible. For example, 
spending limits cannot be exceeded, and user-imposed limitations, such as those put 
on a young shopper account, e.g., sites from which the young shopper can make 
purchases and hours during which the young shopper can make purchases as shown 
in FIGURE 9C, cannot be violated. 

If the transaction is not permissible, the logic proceeds to a block 357 where 
an impermissible transaction message is sent to the requester (e.g., the commerce 
gateway adapter 76 in the context of a purchase request). The logic of FIGURE 20 
then ends in a block 376. If, however, the transaction is permissible, the logic 
proceeds from decision block 356 to a block 360 where the transaction request is sent 
to a credit processing server adapter 86 for further processing as shown in 
FIGURE 2 1 and described next. 

The credit processing server adapter 86 is the component residing on the 
commerce gateway 52 that allows commerce gateway 52 components, such as the 
transaction server 84 and the enrollment server 89 to communicate directly with the 
various sub-systems of the credit processing server 53, which provide for the 
application of the requested transaction to the buyer's actual payment account. 
Accordingly, the logic of FIGURE 21 begins in a block 380 and proceeds to a 
block 382 where the request is received. For example, a purchase authorization 
request or a refund request is received from the transaction server 84 and a credit 
information request is received from the enrollment server 89. The request is then 
formatted to be compatible with the appropriate credit processing sub-system, i.e., the 
account/billing sub-system 94, the payment processing sub-system 95 and/or the 
account enrollment sub-system 96, on the credit processing server 53 in a block 384. 
Next, the logic proceeds to a block 386 where the formatted request is then sent to 
credit processing server 53 for processing by the appropriate credit processing 
sub-system, as shown in FIGURE 22 and described next. 

For any credit processing sub-system, the logic of FIGURE 22 begins in a 
block 390 and proceeds to a block 392 where the transaction request is received from 
the credit processing server adapter 86. Next, account data and sub-account data are 
retrieved in block 394 from the appropriate database, e.g., account database 97 and 
financial database 98. Standard credit transaction processing is then performed in a 



WO 00/79452 PCT/US00/16669 

-31- 



block398. Examples of standard transactions for the account/billing sub-system 94 
include: creating and maintaining accounts, including holding account information 
and account holder information, such as name and address; calculating interest; 
calculating minimum monthly payments; generating electronic monthly statements; 

5 and calculating other charges, known as discounts. The discount is the portion of the 
transaction amount that will go to the provider of the commerce gateway 52, and can 
be determined on a fixed amount per transaction basis, or a percentage of transaction 
amount basis. Examples of standard transactions for the payment processing sub- 
system 95 include: collecting payments from buyers and applying the payments to the 

10 buyer's account; transferring funds between sellers and buyer, for example by 
interfacing with financial institutions 59 for ACH transactions. Examples of standard 
transactions for the account enrollment sub-system include: obtaining credit 
information from credit bureaus; providing the credit information to the commerce 
gateway 52 for scoring; determining a credit score based on the credit information 

15 and providing the score to the commerce gateway; and providing scoring information 
to the account/billing sub-system 94 for account creation. 

The logic then proceeds to a block 399 where necessary account adjustments 
are applied, if applicable. For example, the account balance will be reduced by the 
amount of an authorized purchase transaction. In one embodiment of the present 

20 invention, reward points are accrued at the time of purchase, but committed later, for 
example during the periodic, e.g., monthly, statement preparation process. 
Alternatively, reward points may not accrue until payment is made for the product to 
which the points are attributed. Next, the transaction result, such as the credit 
information or the purchase authorization, is sent to the credit processing server 

25 adapter 86 in a block 400. The logic of FIGURE 22 then ends in a block 402 and 
processing returns to FIGURE 21. 

Returning to FIGURE 21, the result of the transaction request is received 
from the credit processing sub-system 94, 95 or 96 in a block 387. Next, in a 
block 388, the result is then returned to requester, e.g., the result of a purchase 

30 authorization request is returned to the transaction server 84 and credit information, 
for example, a credit limit, is returned to the enrollment server 89 in response to 
request for a credit information request to be used for establishing a buyer's account. 
The logic of FIGURE 21 then ends in a block 389 and processing returns to the 
requester, e.g., transaction server 84 (FIGURE 20) or enrollment server 89 

35 (FIGURE 16). 
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Returning to FIGURE 20, once the transaction server receives the response to 
its transaction request, e.g., authorization result of a purchase request, from the credit 
processing adapter in a block 363, the logic proceeds to a block 364 where the 
transaction record, for example purchase information including amount of purchase, 
5 is stored in memory 83 of the commerce gateway 52. The logic then proceeds to a 
decision block 366, where a test is made to determine if the transaction was 
successfully processed. If so, the logic proceeds to a block 370 where a transaction 
response with a valid status is then sent to the requester (e.g., the commerce gateway 
adapter 76 or the Web browser 64, whichever the case may be). If the transaction 
10 was not successfully processed, the logic proceeds from decision block 366 to a 
block 374 where a transaction response with an error status is then returned to the 
requester in a block 376. 

After a valid transaction response 370, an error transaction response 374, or 
an impermissible transaction response 357 is sent to the requester, the logic of 
15 FIGURE 20 ends in block 376 and processing returns to the requester. In the case of 
a purchase request, the requester is the commerce gateway adapter 76. In one 
exemplary embodiment, a record of all transactions is stored in the financial 
database 98. 

Returning to FIGURE 1 9, after the response to the purchase request made by 

20 the commerce gateway adapter 76 is received from the transaction server in a 
block 336, the logic proceeds to a block 338 where the response including the 
transaction status is formatted to be compatible with the commerce engine 75. The 
formatted response is then forwarded to the commerce engine in a block 340. The 
logic of FIGURE 19 then ends in a block 342 and processing returns to the commerce 

25 engine 75 in FIGURE 18. 

Returning to FIGURE 1 8, once a response is received by the commerce 
engine 75 from the commerce gateway adapter 86 in a block 308, the authorized and 
ordered product is shipped to the buyer in a block 310. It will be appreciated by those 
of ordinary skill in the art that if the ordered product is capable of being downloaded, 

30 e.g., the product is an electronically stored good, a URL for a premium content Web 
site, etc., the product will simply be transferred by the seller server 51 to the buyer 
computer 50. Otherwise, the product will be shipped or provided by more traditional 
methods, e.g., regular mail, hand delivery, etc. Once shipment is complete, the logic 
then proceeds to a block 312 where a settlement request is sent to the commerce 

35 gateway 52 in order to initiate movement of funds. In an actual embodiment of the 
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present invention, the seller submits the transaction into a settlement batch for 
payment when the settlement batch for that seller is next processed. The timing of 
the processing could be that night or at a later date based on the contract, i.e., terms 
of the purchase transaction. FIGURE 41 illustrates an exemplary Web page 4100 for 
5 designating when batches should be processed. Settlement transactions are described 
in FIGURE 24 in more detail below with reference to FIGURE 24. 

Returning to FIGURE 1 8, in a block 3 14, a response confirming fulfillment of 
the order is sent to the Web browser 64 of the buyers computer 50. The logic of 
FIGURE 1 8 then ends in a block 324. 

10 However if at decision block 304, it is determined that the purchase request 

should not be forwarded to the commerce gateway 52; the logic proceeds to a 
block 316 where standard commerce engine processing is performed. More 
specifically, in block 316 traditional credit or debit card authorization is performed 
such as approval or denial for the use of a credit card, e.g., VISA® or 

15 MASTERCARD®, for the specified purchase amount. Next, the authorized goods 
are shipped in a block 318. The logic then proceeds to a block 320 where a 
settlement request is sent to the traditional credit provider, e.g., VISA® or 
MASTERCARD®. A response confirming fulfillment of the order is then sent to the 
Web browser 64 of the buyer computer 50 in a block 322. The logic of FIGURE 18 

20 then ends in block 324 and processing returns to FIGURE 12. 

Returning to FIGURE 12, once the Web browser 64 of the buyer computer 50 
receives a response to its purchase request in a block 240, the logic proceeds to a 
block 241 where an order confirmation Web page 1190 is displayed as shown in 
FIGURE 1 IE. The logic of FIGURE 12 then ends in block 242. 

25 FIGURE 23 is a diagram illustrating the actions taken by the buyers 

computer 50, the seller server 5 1 and the commerce gateway 52 for ordering products 
using a virtual payment account system. This diagram presents a high-level view of 
the detailed processing shown in the flow charts described above. In response to an 
inquiry into purchasing a product 2305, a seller returns a purchase offer 2310 to the 

30 buyer's computer 50. At this point, the buyer has the option of beginning the 
purchasing process as shown in FIGURE 12. To continue the buyer authenticator 65 
checks to see which credentials, e.g. certificates, are available to the buyer and selects 
all available credentials to be used by the commerce gateway 2315 to authenticate the 
buyer. The buyer computer 50 then requests a list of all accounts or sub-accounts 

35 2320 for these credentials from the commerce gateway 52. The commerce gateway 
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52 returns only those accounts that are usable by the buyer 2325 using the selected 
credentials. The buyer computer 50 then generates a purchase confirmation 2330 
using one of the accounts on the list returned from the commerce gateway 52. Buyer 
computer 50 then sends the purchase confirmation 2335 to the seller server 51. The 

5 seller server 51 requests authorization 2340 from the commerce gateway to verify 
that the purchase confirmation is valid. The commerce gateway then returns an 
authorization 2350 that the purchase confirmation is valid. The seller server 51 may 
then notify 2355 the buyer computer 50 that the purchase confirmation was 
authorized. The seller server then prepares the purchase for delivery 2360. At this 

10 point, the seller may request a settlement transaction 2365 from the commerce 
gateway 52. Which would then provide a settlement transaction 2370 back to the 
seller server 51. The seller server 51 may then notify 2375 the buyer computer 50 of 
delivery details. Finally, the good(s) or service(s) that the buyer purchased are 
delivered 2380. 

15 the seller is an auction Web site, the authorization 2340 sent by the 

commerce gateway 52 to the seller server 51 includes information such as a buyer 
account identification, a seller identification, a seller sale offering, a buyer 
authentication, a seller authentication, and a master identification, i.e., identification 
of the commerce gateway 52 provider. Particular to this type of response is an 

20 expiration date/time that is used to signal the shorter of the maximum times that the 
buyer and the seller are willing to "reserve' 1 funds associated with this transaction. If 
the transaction, i.e., settlement request 2365, is not received by the commerce 
gateway 52 before the expiration date/time of the transaction, the products and/or 
funds will be released back to their owners. At a later time, once the buyer has 

25 committed to the purchase, the buyer releases an authorization to the provider of the 
commerce gateway 52 knowing that the seller has proven ability to ship the products 
on demand without delay. This initiates the actual settlement of funds and triggers 
payment to the seller in the next settlement batch, without any further interaction with 
the seller. This payment method supports buyer-initiated, pre-approved purchases 

30 with expiration date/time, such as auction and gift-certificate purchases. 

It will be appreciated that FIGURE 23 illustrates processing of a valid 
purchase transaction. If there is an error at any time during the processing, e.g., buyer 
is not authorized because he or she is not a registered buyer, has exceeded his or her 
spending limit, etc., processing will terminate after an appropriate error response has 
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been returned to the buyer computer 50 for display to the buyer via the Web 
browser 64. 

Settlement Transaction 
When a seller establishes a seller account, a contract is formed defining the 
relationship between the seller and the commerce gateway provider. That contract 
defines the terms, such as when payments will be funded and what fee shall be given 
to the commerce gateway provider. The commerce gateway fee can be a per 
transaction fee or a percentage fee based on the amount of a transaction. The logic 
for settlement transactions for a virtual payment account is similar to the logic used 
for processing standard credit card settlement transactions. After the seller ships the 
product, the seller sends a settlement transaction to the commerce gateway 52 as 
shown in FIGURE 24. It will be appreciated that the logic performed by the seller 
server 51 can be performed by the commerce engine component 75, or some other 
component, for example, a Web browser (not shown) residing on the seller server 5 1 . 
15 FIGURE 24 illustrates the logic implemented by seller server 51 when the 

seller wishes to perform a settlement transaction. The logic begins in a block 530 and 
proceeds to a block 532 where a secure connection between the seller computer 5 1 
and commerce gateway 52 is established, using the same logic shown and described 
with reference to the buyer in block 222 of FIGURE 12. The logic then proceeds to a 
20 block 534 where the seller authenticator process is run. The seller authenticator 
process is similar to the buyer authenticator process shown in FIGURE 13 and 
described above. Next, in a decision block 536 a test is made to determine if the 
seller is a registered participant (i.e., seller's digital certificate was issued by the 
commerce gateway provider, seller's digital certificate has not expired and seller's 
25 digital certificate has not been revoked). If not, the logic proceeds to a block 538 
where a seller authentication error message is displayed on the seller server 
display 72, for example, via a Web browser. The logic of FIGURE 24 then ends in a 
block 548. 

If the seller authenticator process is successful, the logic proceeds from 
30 decision block 536 to a block 544 where a settlement request is sent to the transaction 
server 84 on the commerce gateway 52. As shown and described in FIGURE 25, the 
transaction server 84 forwards the request to the credit processing server adapter 86, 
which in turn forwards the transaction request to the appropriate credit processing 
sub-system. In the case of a settlement transaction request, the payment processing 
35 sub-system 95 processes the transaction. The payment processing sub-system 
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forwards the settlement request to the financial institution 59. The financial 
institution funds the transactions into the commerce gateway provider's account. The 
commerce gateway provider takes its percentage and pays the sellers their portion. 
The financial institution 59 waits for their billing cycle, e.g., monthly, and then 
5 charges the buyers for their purchases plus interest charges. The financial institution 
waits for the buyer payments. If the buyer does not pay, standard late payment 
processing, such as late notices, finance charges, etc. is performed. 

The logic of FIGURE 25 begins in a block 2505 and proceeds to a block 2510 
where the settlement request is received. The origin or source of the settlement 
10 request as well as the context, i.e., date and time, of the request are then recorded in 
memory 83 of the commerce gateway 52 in a block 2515. Next, the logic proceeds to 
a decision block 2520 where a test is made to determine whether the requested 
settlement is permissible. A variety of factors can be considered in making the 
determination of whether a requested settlement is permissible. Some factors might 
15 include a settlement request for a transaction that did not have a purchase 
confirmation from a buyer, that had a purchase confirmation from a buyer whose 
account did not hold sufficient funds, for an auction settlement whose time had 
expired or whose credentials were no longer valid. It will be appreciated that yet 
other factors may cause a settlement transaction to be impermissible. If the 
20 transaction is not permissible, the logic proceeds to a block 2560 where an 
impermissible settlement request message is sent to the requester, i.e., the seller, in 
this case. If, however, the transaction is permissible, the logic proceeds from 
decision block 2520 to a block 2525 where the transaction request is sent to a credit 
processing server adapter 86 for further processing as shown in FIGURE 21 and 
25 described above. Continuing in FIGURE 20, once the transaction server receives the 
response to its transaction request, e.g., authorization result of a settlement request, 
from the credit processing adapter in a block 2530, the logic proceeds to a block 2535 
where a transaction record, for example purchase information including amount of 
purchase, is stored in memory 83 of the commerce gateway 52. The logic then 
30 proceeds to a decision block 2540, where a test is made to determine if the 
transaction was successfully processed. If so, the logic proceeds to a block 2545 
where a transaction response with a valid status is then sent to the requester, i.e., the 
seller in this case. If the transaction was not successfully processed, the logic 
proceeds from decision block 2540 to a block 2555 where a transaction response with 
35 an error status is then returned to the requester. 
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After a valid transaction response 2545, an error transaction response 2555, or 
an impermissible transaction response 2560 is sent to the requester, the logic of 
FIGURE 25 ends in block 2550 and processing returns to the requester. 

Referring back to FIGURE 24, after the transaction server 84 has processed 
5 the settlement transaction and provided the results of the settlement transaction to the 
seller's computer 51, the result of the settlement transaction is displayed on the 
seller's display 73, for example, via the seller server's Web browser. The logic of 
FIGURE 24 then ends in block 548. 

Refund Transaction 

1 0 FIGURE 26 illustrates the logic implemented by the present invention when a 

refund transaction is initiated, for example, when a buyer disputes a charge on his or 
her virtual payment account. As with any payment dispute, it must be determined 
whether the buyer will receive all or a portion of the disputed amount. This process 
is external to the virtual payment system of the present invention. The determination 
of whether the dispute has merit is determined by the seller. If the seller determines 
that the dispute has merit, the seller notifies a customer service representative and a 
refund transaction is initiated. In the embodiment shown in FIGURE 26 and 
described herein, if it is determined that an amount disputed by a buyer is subject to a 
refund, a customer service representative initiates the refund, or chargeback 
20 transaction via the administrative computer 54 shown in FIGURE 2. In one actual 
embodiment, the administrative computer is a "dumb terminal" by which the 
customer service representative enters information directly into the transaction 
server 84 on the commerce gateway 52. In another embodiment, the administrative 
computer may have a Web browser that allows the administrator to enter the 
25 information using Web pages available only on the LAN 44 behind the firewall 55, 
i.e., the buyer and seller do not have access to these administrative Web pages. 

Referring to FIGURE 26, the logic begins in a block 550 and proceeds to a 
block 552 where the refund information including account, sub-account and amount 
is obtained. The refund transaction information is then sent to the transaction 
30 server 84 by the administrative computer 54 in a block 554 in the form of a refund 
request. Transaction server 84 processing is shown and described with reference to 
FIGURE 20. 

As also noted above, in processing the refund request, the transaction 
server 84 will forward a transaction request to the credit processing server 53 for 
processing by the account/billing sub-system 94 as shown in FIGURE 22. A refund 
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applied to a buyer's virtual payment account causes the buyer's balance to decrease 
by the amount of the payment. Still referring to FIGURE 26, after the transaction 
server 84 has processed the refund transaction, the result of the transaction processing 
is received and displayed by the administrative computer 54. The logic of 
5 FIGURE 26 then ends in a block 558. Unlike the purchase transaction, the refund 
transaction is not initiated by the buyer via the Web browser 64; therefore, the buyer 
is notified by other means, for example by sending an e-mail message to the buyer's 
computer 50. It will also be appreciated that in yet other embodiments of the present 
invention, the seller server 51 may initiate the refund request as opposed to the 
10 administrative computer 54. 

Buyer Account Management 
Other transactions normally associated with an account such as a standard 
credit card account are also applicable to the virtual payment account of the present 
invention. FIGURES 1 OA- IOC illustrate some examples of Web pages used by a 
15 buyer with a virtual payment account. Processing of these transactions is similar to 
other transaction processing as illustrated in flow diagrams and described above, and 
therefore will not be discussed in further detail herein. FIGURE 10A illustrates a 
Web page 660 containing details of a primary account 632 along with sub- 
accounts 634. FIGURE 10B illustrates an exemplary Web page 665 summarizing the 
20 sub-accounts for a master account 634. FIGURE IOC illustrates a transaction 
summary Web page 670 for the sub-accounts for a given master account. 

Seller Reports 

It is often desirable for seller's to have detailed reports available to judge the 
current state of their business. Accordingly, the present invention maintains records 

25 of transactions in readily retrievable formats. It is also desirable that competitors not 
have access to the same reports on the details of a seller's business. Accordingly, the 
present invention provides for secure authenticated access to a seller's reports. 
FIGURE 42 illustrates the logic for generating seller reports. The logic starts at a 
block 4201 and proceeds to a block 4210 that establishes a secure connection 

30 between the seller computer 51 and the commerce gateway 52. The logic then 
proceeds to a block 4215 where the seller is authenticated much as the buyer 
authenticator illustrated in FIGURE 13. The flow continues to a block 4220 where a 
test is performed to see if the seller has been authenticated. If the authentication was 
successful, the logic continues to a block 4225 where the seller requests the 

35 transaction server 84 to generate a report. At a block 4230 the transaction server 
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retrieves relevant information and generates a report, which in a block 4235 is 
received by the seller computer for viewing by the seller. The logic ends in a 
block 4299. 

In one actual embodiment of the present invention, the commerce gateway 52 
requests report information from the credit processing server 53, in particular from 
the financial database 98 stored on the credit processing server. It will be appreciated 
by those of ordinary skill in the art, that a financial database may be used to store 
information forreport generation, yet may also store information relevant for other 
purposes. 

FIGURES 31, 33, 35, 37 and 39 illustrate exemplary Web pages 3100, 3300, 
3500, 3700 and 3900 illustrating exemplary reports available to a seller. FIGURE 3 1 
shows an exemplary Web page 3100 with a graph charting the number of sales 
occurring each month during a year-long period. FIGURE 33 shows an exemplary 
Web page 3300 with a table indicating the status and information on particular orders 
received. FIGURE 35 shows an exemplary Web page 3500 with a table listing 
transactions that have already been processed for each order, and the result of that 
processing. FIGURE 37 shows an exemplary Web page 3700 with a table listing 
item sales and along with relevant statistics such as number of units sold, what 
percentage of units have been sold and what percent of overall sales does that item 
account for. FIGURE 39 shows an exemplary Web page 3900 with a table listing 
transactions that have yet to be processed and are still wait for the next batch of 
transaction to be run. 

FIGURES 32, 34, 36, 38 and 40 illustrate exemplary Web page forms 3200, 
3400, 3600, 3800 and 4000 for customizing seller reports. 

While the preferred embodiment of the invention has been illustrated and 
described, it will be appreciated that various changes can be made therein without 
departing from the spirit and scope of the invention. For example, it will also be 
appreciated that there are other transactions applicable to a virtual payment account 
of the present invention, e.g., account closure, credit limit modification, overdue 
30 account notification, etc. It will be appreciated that these transactions can be initiated 
by various components of the system, for example a financial institution may institute 
a change in a credit limit by sending a request to one of the sub-systems on the credit 
processing server. One of ordinary skill in the art will recognize that the requests for 
such transactions are processed by the virtual payment system of the present 
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invention in a manner similar to the processing of the purchase settlement, and refund 
transactions described in detail above. 
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The embodiments of the invention in which an exclusive property or privilege 
is claimed are defined as follows: 

L A method for purchasing a product from a seller computer using a 
virtual payment account, comprising: 

receiving a request from a buyer computer to purchase said product from said 
seller computer using said virtual payment account; 

in response to said purchase request, determining whether said buyer 
computer is associated with said virtual payment account; 

in response to determining that said buyer computer is associated with said 
virtual payment account, applying a cost of said product to said virtual payment 
account; and 

providing said product to a buyer associated with said buyer computer. 

2. The method of Claim 1, wherein determining whether said buyer 
computer is associated with said virtual payment account comprises: transmitting an 
authentication request from said buyer computer to a commerce gateway; 
determining at said commerce gateway whether said virtual payment account is 
associated with said buyer computer; and transmitting an account identification 
container to said buyer computer in response to determining that said buyer computer 
is associated with a valid virtual payment account 

3. The method of Claim 2, wherein determining at said commerce 
gateway whether said virtual payment account is associated with said buyer computer 
further comprises determining at said commerce gateway whether said virtual 
payment account is valid. 

4. The method of Claim 2, wherein said authentication request comprises 
a digital certificate. 

5. The method of Claim 4 further comprising retrieving said digital 
certificate from a secure token. 

6. The method of Claim 1, wherein determining whether said buyer 
computer is associated with said virtual payment account comprises: transmitting an 
alternate authentication request from said buyer computer to a commerce gateway; 
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sending an alternate authentication message from said commerce gateway to a buyer 
authentication device; retrieving said alternate authentication message; verifying said 
alternate authentication message with said commerce gateway; and in response to 
verifying said alternate authentication message determining that said buyer computer 
is associated with said virtual payment account. 

7. The method of Claim 1, wherein determining whether said buyer 
computer is associated with said virtual account comprises: transmitting an alternate 
authentication request from said buyer computer to a commerce gateway; initiating 
an alternate authentication dialog with said buyer computer; in response to said 
alternate authentication dialog determining that said buyer computer is associated 
with said virtual payment account. 

8. The method of Claim 1, wherein applying a cost of said product to 
said virtual payment account comprises: receiving said account identification 
container at said seller computer; transmitting said account identification container 
and said cost of said product from said seller computer to said commerce gateway; 
determining whether said virtual payment account may be charged for said cost of 
said product; and in response to determining that said virtual payment account may 
be charged for said cost of said product, transmitting a valid transaction authorization 
from said commerce gateway to said seller computer. 

9. The method of Claim 1, wherein said virtual payment account 
comprises a main account and at least one sub-account. 

10. The method of Claim 9, wherein said sub-account is operative only to 
accept charges from a predetermined list of seller computers. 

1 1 . The method of Claim 9, wherein a spending limit may be set by said 
buyer for said sub-account. 

12. A method for purchasing a product from a seller computer comprising: 
receiving a request from a buyer computer to purchase said product from said 

seller computer using a virtual payment account; 

in response to said purchase request determining that buyer computer will use 
an alternate payment mechanism; validating said alternate payment mechanism; and 

providing said product to a buyer associated with said buyer computer. 
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13. A method for purchasing a product from a seller computer using a 
virtual payment account associated with a buyer computer, the method comprising: 

receiving a request from said buyer computer to purchase said product, said 
purchase request identifying said virtual payment account as a payment source for 
said product; 

in response to said purchase request, transmitting an authentication request 
from said buyer computer to a commerce gateway; 

determining at said commerce gateway whether said virtual payment account 
is associated with said buyer computer; 

transmitting an account identification container to said buyer computer in 
response to determining that said buyer computer is associated with a valid virtual 
payment account; 

transmitting said purchase request including said account identification 
container from said buyer computer to said seller computer; 

transmitting said purchase request from said seller computer to said 
commerce gateway; 

receiving said purchase request at said commerce gateway and determining 
whether said virtual payment account may be used to pay for said product; 

in response to determining that said virtual payment account may be used to 
pay for said product, transmitting a valid transaction authorization from said 
commerce gateway to said seller computer and said buyer computer; 

charging said virtual payment account for a cost associated with said product; 

and 

providing said product to a buyer associated with said buyer computer. 

14. The method of Claim 13, wherein said virtual payment account 
comprises a main account and at least one sub-account. 

15. The method of Claim 14, wherein charging said virtual payment 
account for a cost associated with said product comprises charging said sub-account 
for a cost associated with said product. 

16. The method of Claim 15, further comprising: determining whether 
said sub-account is authorized to receive a charge from said seller computer; and 
charging said sub-account for a cost associated with said product in response to 
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determining that said sub-account is authorized to receive said charge from said seller 
computer. 

17. The method of Claim 13, wherein said virtual payment account 
comprises a credit account. 

18. The method of Claim 13, wherein said virtual payment account 
comprises a pre-paid account. 

19. The method of Claim 13, wherein said authentication request 
comprises a digital certificate, and wherein said digital certificate is transmitted to 
said commerce gateway. 

20. The method of Claim 13, wherein determining whether said virtual 
payment account may be used to pay for said product comprises determining whether 
a spending limit has been exceeded. 

21. A method for creating a virtual payment account for a buyer which 
may be used to pay for products ordered over an internetwork, the method 
comprising: 

receiving application data from said buyer; 

determining a credit score for said buyer based upon said application data; 

determining whether said credit score exceeds a threshold credit score; 

in response to determining that said credit score exceeds said threshold credit 
score, establishing a virtual payment account associated with said buyer at a 
commerce gateway; and 

installing a digital certificate on a buyer computer associated with said buyer 
that uniquely identifies said buyer as-the registered holder of said virtual payment 
account. 

22. The method of Claim 21, further comprising: in response to receiving 
application data from said buyer, determining an identify score for said buyer based 
upon said application data; determining whether said identify score exceeds a 
threshold identity score; and in response to determining that said identity score 
exceeds said threshold identity score, then proceeding to determining a credit score. 
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23. The method of Claim 22, wherein determining an identity score for 
said buyer comprises: requesting identity information from an identity bureau based 
on said application data; receiving said identity information from said identity 
bureau; and combining said identity information with said application data to 
determine said identity score for said buyer. 

24. The method of Claim 22, wherein determining an identity score for 
said buyer comprises requesting said identity score from an identity bureau based on 

said application data. 

25. The method of Claim 2 1 further comprising generating a public key 
encryption pair having a private key and a public key. 

26. The method of Claim 25, wherein installing a digital certificate further 
comprises transmitting said public key to said commerce gateway, said commerce 
gateway certifying said public key to generate said digital certificate; and receiving 
said digital certificate from said commerce gateway. 

27. The method of Claim 21 , wherein installing a digital certificate further 
comprises storing said certificate on a secure token. 

28. The method of Claim 21, further comprising: in response to 
determining that said credit score does not exceed said threshold credit score 
establishing a prepaid virtual payment account associated with said buyer at said 
commerce gateway. 

29. The method of Claim 2 1 , wherein determining a credit score for said 
buyer comprises: requesting credit information for said buyer from a credit bureau 
based on said application data; receiving said credit information from said credit 
bureau; and combining said credit information with said application data to determine 
said credit score for said buyer. 

30. The method of Claim 2 1 , wherein said buyer comprises a business. 

31. The method of Claim 2 1 , wherein reward points associated with said 
virtual payment account may accrue based upon a volume of purchases charged to 
said virtual payment account. 
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32. The method of Claim 21, wherein said virtual payment account 
comprises a main account and at least one sub-account created by said buyer. 

33. The method of Claim 32, wherein said buyer may set spending limits 
for said sub-account. 

34. The method of Claim 32, wherein said sub-account may be associated 
with a second buyer. 

35. The method of Claim 32, wherein said sub-account may be configured 
by said buyer to accept charges only from a predetermined list of sellers. 

36. A method for settling at least one virtual payment account transaction, 
the method comprising: 

receiving at least one settlement transaction request from a seller computer; 
determining that said at least one settlement transaction request is 
permissible; 

in response to determining that said at least one settlement transaction request 
is permissible, processing said at least one settlement transaction request; 

in response to processing said at least one transaction request, adjust a seller 
account associated with said seller computer. 

37. The method of Claim 36, wherein said at least one settlement 
transaction request is substantially contemporaneous with at least one associated 
purchase transaction. 

38. The method of Claim 36, wherein said at least one settlement 
transaction request is delayed for a predetermined period of time after at least one 
associated purchase transaction. 

39. A method for refunding a purchase transaction to a virtual payment 
account, the method comprising: 

receivings refund request from an administrative computer; 
in response to said refund request determining that said refund is permissible; 
in response to determining that said refund is permissible, processing said 
refund request; 
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adjusting said virtual payment account in response to the processed refund 
request. 

40. A method for generating a report comprising receiving a report request 
from a seller computer using a virtual payment account; 

in response to said report request, determining whether said seller computer is 
associated with said virtual payment account; 

in response to determining that said seller computer is associated with said 
virtual payment account, generating a report; and 

transmitting said report to said seller computer. 

41. The method of Claim 40, wherein determining whether said seller 
computer is associated with said virtual payment account comprises: transmitting an 
authentication request comprising a digital certificate from said seller computer to a 
commerce gateway; determining at said commerce gateway whether said virtual 
payment account is valid; determining at said commerce gateway whether said virtual 
payment account is associated with said seller computer; and transmitting an account 
identification container comprising said digital certificate to said seller computer in 
response to determining that said seller computer is associated with a valid virtual 
payment account. 

42. A system for purchasing a product, comprising: 

a buyer computer operative to purchase a product using a virtual payment 
account; and 

a seller computer operative to receive a request from said buyer computer to 
purchase said product from said seller computer using said virtual payment account; 

in response to said purchase request, determine whether said buyer computer 
is associated with said virtual payment account; 

in response to determining that said buyer computer is associated with said 
virtual payment account, applying a cost of said product to said virtual payment 
account; and 

provide said product to a buyer associated with said buyer computer. 

43 . The system of Claim 42, further comprising: 

a secure token associated with said buyer computer; and 
said seller computer is further operative to: 
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determine whether said buyer computer is associated with said virtual 
payment account by retrieving a digital certificate from said secure token; and 
transmit an authentication request including said digital certificate to a commerce 
gateway; and 

said commerce gateway is operative to: 

determine whether said virtual payment account is valid; 

determine whether said virtual payment account is associated with said buyer 
computer; 

and transmit an account identification container to said buyer computer in 
response to determining that said buyer computer is associated with a valid virtual 
payment account. 

44. The system of Claim 42, further comprising a commerce gateway 
operative to determine whether said buyer computer is associated with said virtual 
payment account by receiving an alternate authentication request from said buyer 
computer; sending an alternate authentication message from said commerce gateway 
to a buyer authentication device; receiving a verification request comprising said 
alternate authentication message; verifying said alternate authentication message with 
said commerce gateway; and in response to verifying said alternate authentication 
message determining that said buyer computer is associated with said virtual payment 
account. 

45. The system of Claim 42, further comprising a commerce gateway 
operative to: apply a cost of said product to said virtual payment account also: 
receiving an account identification container associated with said virtual payment 
account and said cost of said product from said seller computer; determining whether 
said virtual payment account may be charged for said cost of said product; and in 
response to determining that said virtual payment account may be charged for said 
cost of said product, transmitting a valid transaction authorization from said 
commerce gateway to said seller computer. 

46. A system for purchasing a product, comprising: 

a buyer computer operative to purchase a product using a virtual payment 
account; and 

a seller computer operative to: 
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receive a request from said buyer computer to purchase said product, said 
purchase request identifying said virtual payment account as a payment source for 
said product; and 

a commerce gateway operative to: 

receive an authentication request from said buyer computer; 

determine whether said virtual payment account is associated with said buyer 
computer; 

transmit an account identification container to said buyer computer in 
response to determining that said buyer computer is associated with a valid virtual 
payment account; 

receive a processed purchase request from said seller computer; 
determine whether said virtual payment account may be used to pay for said 
product; 

in response to determining that said virtual payment account may be used to 
pay for said product, transmit a valid transaction authorization to said seller 
computer; 

charging said virtual payment account for a cost associated with said product. 

47. A system for creating a virtual payment account for a buyer, the 
system comprising: 

a commerce gateway operative to: 
receive application data from said buyer; 

determine a credit score for said buyer based upon said application data; 

determine whether said credit score exceeds a threshold credit score; 

in response to determining that said credit score exceeds said threshold credit 
score, establish a virtual payment account associated with said buyer; and 

install a digital certificate on a buyer computer associated with said buyer that 
uniquely identifies said buyer as the registered holder of said virtual payment 
account. 

48. The system of Claim 47, wherein said commerce gateway is further 
operative to: in response to receiving said application data from said buyer, determine 
an identify score for said buyer based upon said application data; determine whether 
said identify score exceed a threshold identity score; and in response to determining 
that said identity score exceeds said threshold identity score, then proceeding to 
determine a credit score. 
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49. The system of Claim 47, wherein said buyer computer is further 
operative to install a digital certificate by generating a public key encryption pair 
having a private key and a public key; transmit said public key to said commerce 
gateway; and wherein said commerce gateway is further operative to certify said 
public key to generate said digital certificate; and transmit said digital certificate to 
said buyer computer for storage. 

50. A system for settling at a virtual payment account transaction, 
comprising: 

a commerce gate way operative to: 

receive a settlement transaction request from a seller computer; 

determine whether said settlement transaction request is permissible; 

in response to determining that said at least one settlement transaction request 
is permissible, process said at least one settlement transaction request; 

in response to processing said at least one transaction request, adjust a seller 
account associated with said seller computer. 

51. A computer-readable medium having an executable component for 
purchasing a product from a seller computer using a virtual payment account, 
wherein the executable component purchases a product by: 

receiving a request from a buyer computer to purchase said product from said 
seller computer using said virtual payment account; 

in response to said purchase request, determining whether said buyer 
computer is associated with said virtual payment account; 

in response to determining that said buyer computer is associated with said 
virtual payment account, applying a cost of said product to said virtual payment 
account; and 

providing said product to a buyer associated with said buyer computer. 

52. The computer-readable medium of Claim 51, wherein the executable 
component purchases a product by further determining whether said buyer computer 
is associated with said virtual payment account comprises: retrieving a digital 
certificate from said secure token; transmitting an authentication request including 
said digital certificate from said buyer computer to a commerce gateway; determining 
at said commerce gateway whether said virtual payment account is valid; determining 
at said commerce gateway whether said virtual payment account is associated with 
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said buyer computer; and transmitting an account identification container to said 
buyer computer in response to determining that said buyer computer is associated 
with a valid virtual payment account. 

53. The computer-readable medium of Claim 51, wherein the executable 
component purchases a product by further determining whether said buyer computer 
» assorted with said virtual payment account comprises: transmitting an alternate 
authent.cat.on request from said buyer computer to a commerce gateway; sending an 
alternate authentication message from said commerce gateway to a buyer 
authent.cation device; retrieving said alternate authentication message; verifying said 
alternate authentication message with said commerce gateway; and in response to 
venfymg sa.d alternate authentication message determining that said buyer computer 
is associated with said virtual payment account. 

54. The computer-readable medium of Claim 5 1 , wherein the executable 
component purchases a product by further applying a cost of said product to said 
virtual payment account comprises: receiving said account identification container at 
said seller computer; transmitting said account identification container and said cost 
of said product from said seller computer to said commerce gateway; determining 
whether said virtual payment account may be charged for said cost of said product- 
and in response to determining that said virtual payment account may be charged for 
sa,d cost of sa.d product, transmitting a valid transaction authorization from said 
commerce gateway to said seller computer. 

55. A computer-readable medium having an executable component for 
purchasmg a product from a seller computer using a virtual payment account 
associated with a buyer computer, wherein the executable component purchases a 
product by: 

receiving a request from said buyer computer to purchase said product said 
purchase request identifying said virtual payment account as a payment source for 
said product; 

in response to said purchase request, transmitting an authentication request 
from said buyer computer to a commerce gateway; 

determining at said commerce gateway whether said virtual payment account 
is associated with said buyer computer; 
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transmitting an account identification container , 0 saH ^ 
response to deling , na , said buyer compuler js ^ 

payment account; vinuai 

transmitting said purchase request including said account identification 
container from said buyer computer to said seller computer- 

transmitting said purchase request from said 'seller computer to said 

commerce gateway; 

wheth re "T n8 f PMn!ta " re< " ,eS1 M " i " COmmerce * ate ^ «* fining 
whether sa.d virtual payment account may be used ,„ pay f or said producl . " 8 

.n response to determining that said virtual payment account may be used to 
pay for satd product, transmitting a vaiid transaction authorization from a 
commerce gateway to said seller computer and said buyer computer 
^ charging said virtual payment account for a cos, associated with said product; 

providing said producl to a buyer associated with said buyer computer. 

creati J!' •* ^ ^"-"^ med ™ ^mg an executable component for 
creatmg a v.rtua, payment a ccou„t for a buyer which may be used to p ay f or products 
dered over an .ntemetworK, wherein the execute component creates a virtuL 
payment account by: 

receiving application data from said buyer; 

determining a credit score for said buyer based upon said appHcation data- 
determimng whether said credit score exceeds a threshold credit score- ' 

score estaZT 10 deten 7 in8 th3t ^ CrCdit SC ° re CXCeedS Said thresh0 " d -edit 
score, estabhshmg a vuiual payment account associated with said buyer at a 

commerce gateway; and 

installing a digital certificate on a buyer computer associated with said buyer 

IclT Mid buyer 35 the registered ho,der of said VirtUa » ~ 

57. The computer-readable medium of Claim 56, wherein the executable 
component creates a virtual payment account by further receiving app.ication data 
from sa,d buyer and in response, determining an identify score for said buyer based 
^n sa,d application data; determining whether said identify score exceeds a 
thresho,d .dennty score; and in response to determining that said identity score 
exceeds sa,d threshold identity scored then proceeding to determining a credit score 
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58. A computer-readable medium having an executable component for 
settling at least one virtual payment account transaction, wherein the executable 
component settles at least one virtual payment account by: 

receiving at least one settlement transaction request from a seller computer; 

determining that said at least one settlement transaction request is 
permissible; 

in response to determining that said at least one settlement transaction request 
is permissible, processing said at least one settlement transaction request; and 

in response to processing said at least one transaction request, adjust a seller 
account associated with said seller computer. 



WO 00/79452 



PCT/US00/16669 



2/56 




ADMINISTRATIVE 
USER 



Fig. 2. 



CREDIT 
BUREAU 



FINANCIAL 
INSTITUTION 



WO 00/79452 



PCI7US00/16669 



3/56 




NETWORK 
INTERFACE 



PROCESSING 
UNIT 

7^ 




61 

J 



D DISPLAY 




MEMORY 



WEB 
BROWSER 



BUYER 




AUTHENTICATOR 



Fig. 3. 



WO 00/79452 PCT/US00/16669 

4/56 



51 



NETWORK 
INTERFACE 



70 



PROCESSING 
UNIT 



7\ 



\7 



v- 



71 



MEMORY 



COMMERCE 
GATEWAY 
ADAPTER 



COMMERCE 
ENGINE 



SELLER 
AUTHENTICATOR 



PRODUCT 
DATABASE 



0 



DISPLAY 



72 





75 




74 



Fig.4 



WO 00/79452 



PCT/USOO/16669 



5/56 



80 



84 



88 



79 



NETWORK 
INTERFACE 



PROCESSING 
UNIT 





MEMORY 



TRANSACTION 
SERVER 



CREDIT 
PROCESSING 
SERVER ADAPTER 



ACCOUNT 
IDENTIFICATION 
CONTAINER 
GENERATOR 



ENROLLMENT 
SERVER 



ID BUREAU 
ADAPTER 



83 



81 



89 




85 



Fig. 5. 



WO 00/79452 



PCT/US00/16669 



6/56 



53 




96 




NETWORK 
INTERFACE 




PROCESSING 
UNIT 



7S 



A- 
V 



MEMORY 



ACCOUNTI 

BILLING 
SUB-SYSTEM 



PAYMENT 
PROCESSING 
SUB-SYSTEM 



-v 



ACCOUNT 
ENROLLMENT 
SUB-SYSTEM 




ID BUREAU 
ADAPTER 






ACCOUNT 
DATABASE 




FINANCIAL 
DATABASE 



92 
J 



DISPLAY 



95 





Fig. 6. 



WO 00/79452 



PCTAJS00/16669 



50 



52 



7/56 



53 



56 



58 



BUYER 
COMPUTER 



COMMERCE 
GATEWAY 



REQUEST 
APPLICATION 



PROVIDE 



APPLICATION 



SUBMIT COMPL ETED 
APPLICATION * 




L 



120 



CREDIT 
PROCESSING 
SERVER 



IDENTITY 
BUREAU 



CREDIT 
BUREAU 



104 

SUBMIT 
APPLICATIO 




106 



DATA 



.^PROVID E ID 
ifN FORMATION 



111 



REQUEST ID 
INFoRMATlO 




REQUEST CREDI T 

information 



108 



PROVIDE CREDIT 
INFORMATION 



112 



COMBINE CREDIT AMD 
ID INFORMA TION WltH 
APPLICATION DATA 
110 DETERMINE ! 
CREDIT SCORE \ 



110 



REQUEST 
KEY PAIR' 



return c reate A ccount- 
application ' 

RESULT 



$ENERATl KEY PAIR 



SUBMIT PUBLIC KE' 




RETURN CERTIFICATE] 

H« AND L 

APPLICATION RESULt 



GENERATE 
CERTIFICATE 




113 



\SAVE CERTIFICATE 



128 



114 



Fig. 7. 



WO 00/79452 



PCT/US00/16669 




8/56 



ex^arge- 



Helf | Svcarlty 




Open an account 

Thank you for your interest in eCharqe 

Opening an eCharge Net Account is fast easv 

approved, just download our security so^tl^Tj 7 ^ ^ C °' e Mer > our W'ication is 

just 10 to 15 minutes. ' ^ 3nd ac,ryrale °.grtai O- The entire process takes 

There are four easy steps 

1- Provide your information 

2. Application review & resufts 

3. Download 

4. Activate your account 

Before you start 

We recommend that you- 

Choose your Net Account 

° &^~. , r:rrrsr' — - - - « 




Fig.8A. 



WO 00/79452 PCT/USOO/16669 



K^eCh aige Net Account Application - Netscape 

Ife-^'fa' jti' ^"Wv^li ■ " = > 1 



e^Qharge- 



H«lp | Security 



Step 1 : Provide your Information 

Electronic disclosure agreement 

Please read this document carefully and keep a copy for your records. 

Well provide the following information to you electronically, as required by the Truth in Lendinq Act 

* lerms and conditions of your eCharge credit account 

* Monthly statements 

* Change in terms notices 

* Initial Disclosure Statement 

Electronic disclosure statements are available at htto://www echarn e xnm/rtisrln*..™; an d are 
good for at least 90 days. After the 90 day period, the disclosure information wiH be available upon 
request by contacting Customer Support Any changes to these statements will provided to you 
e ectron.ca y at your e-marf address on file. In the future, we may provide additional disclosures 
electronically. To receive this information youll need a 128-bit browser that is JavaScript enabled 
and connection to the Inlemet. p • 

dfed wurT yit,r appHCatt0n yOU need lo check aI1 boxes and agree to accept electronic 

□ I have access to a computer thai satisfies the above requirements. 
(You are currently using a computer that satisfies these requirements) 

□ I have access to a printer OR can download information to keep copies for my records. 

□ t want to complete this credit application and I agree to accept electronic disclosures of the 
information listed above. 

For assistance concerning these disclosures, requesting technical information or updating your 
email address, contact us at Customer Supp ort a 7 



CAMCCt J 



Fig.8B. 
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■ &e Chaige Net Account Application - Netscape 



r Steps 

U 2 8 4 




Step 1 : Provide your Information 

Apply for a credit account 

AH fields marked with a star f) must be completed so we can process your eCharge Net Account 
application. For an explanation of the required information, click on a specific link or Help- 



Personal information 

H 3 IT) 

E Mjil Ad <!.*«* 

I 

Homy Pkont* 



Current address 



pat* cr 6hw» (rW4d/yvyy) 

CZHZj<I 

» » 



lite 



3 C 



C 



P3T 



z 



Financial and employment information 

I x ■ » ..,.3 |- 6«Ud»r»- H 

T"»f i\ Cyt trt Sf nploym^r 2 AwujI Ho^hold Inwmf 



Making payments 

You can pay for your credit account purchases from your checking or 
savings account. 

ft«*wl rnr <t- Checking O Savings 

ABA floutmn NuiBbn 1 j . ^ 

Bin* Account Numo,,* | 



Special offers 

© Rease send me notices about special offers from eCharge. 
online retailers who accept eCharge. and other companies. 
O Please send me special offer notices only from eCharge 
O Please do not send me special offer notices from eCharge or any 
other company at Ihrs time. 



CANCEl ) 



VwMrty . •Cb*r 9 . M mxxb, «*il»bU to U.S. r**M*«tt. «xotpt «f AJ.brmj «tvd Iom. rtftjUS tiOiM 



* b*sa tof Mp«ytog fete nbKacb»A. 

P"»tw | Tmm jf>4 Condition? 



♦ 2000 tlfo.-jt votPoi>t. , H. . Ail ngKti MMW*4. 
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! ^•'- Chai 9e H et Ac counl Applicatton - Netscape 



Please check the application information below (or accuracy 




Personal Information 
First Name* 
Middle Initial 
Last Name" 
E-Mail Address* 
Date of Birth* 
Home Phone* 
Oaytime Phone 

Current address 
Address- 
City* . 
Stale- 
Zip Code* 
Home Ownership* 
Time at this Address" 



Financial end employment Information 

Social Security Number* 

Employment Status* 

Time at Current Employment* 

Annua! Household Income* 



Bank account Information 
Account Type" 
ABA Routing Number 
Bank Account Number" 



123 Main Street 
New York 

Nr 

00200 
Own 

03 years 08 months 



111 -22-3333 
Employed 

05 years 06 months 
550.000 to $99,999 



Checking 
111111111 

2222222222 



Special offers 

Please send me notices about special offers from eCharge. online retailers who accept eCharge and other 
companies. 

Terms and Conditions 




, L 3m * Ppl3fm9 for c,edil aod - * W***. "»y credrt account wHi be governed by the Terms and 
LorwMions. I have read the Terms and, Condons regarding this credit account and everything I have stated in my 
application is true. By cfecVtog on the 1 Agree" button betow. I agree to the Terms and Conditions and 
acknowledge that I have downloaded or printed a copy of these Terms and Conditions for my records By diking on 

o i .J bUtt0n b0l0W * 1 acknowle(1 9e ' wwwed the Stale 1 aw Piscina and I authorize the 
oar* to obtain a credit report and to check my credit and employment history. 



♦ 2O00- 



>' iT •. ->n .».jt..>... All rifhktwwnd 
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ft^eChaige Ne t Account Application - Netscape 




Step 2 : Application Review & Results 
Congratulations! 

YouVe been approved for an eCharge Net Account. Here are the terms for your credit account: 
Credit limit $ 
Introductory APR 

APfi after Introductory Period 



„% untH {date) 
% 



^n7v°" an1 K di M ,0$UfeS V P3ft ° f ,He T^ms and Conditinn^ of your eCharge Net 
Account. You should pnnt or download a copy of these disclosures for your records For i 

^jffiSL* y ° 0f in,r ° dUC,0fy " ^ rev«w the 

By clicking on the "I Accept' button below, I agree to the terms set forth above. 

I DO NOT ACCEPT J 



Pti Y15Y | Terms *nd Coiydrti^ns 
® 2000 rCr.j.. ]r ■:...( ... n,.-.,. aii riffh!$ 



Qn*r O^d/t - Avon)*? A^pjy 

Ck-/ty ADOiicsfron 

Qetrr AFCUrCjtrOn - Offline- 




/ 
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Step 3: Download 

eCharge is downloading the security software 

approximately X minutes to download the security software on a 56.6 kbps modem 
connection. Thank you for waiting. 



IS^T?' COnl3i ? S 0W pr °P rietar y ^ryption technology, along with other unique security 

features. So anyttme you make an eCharge purchase, you can count on guaranteed fraud protection. 

You can make purchases with your eCharge Net Account as soon as this download is complete and 
you have activated your Digital ID. t-w»pieie ana 



I 

i 

i 
I 
| 

i 



t 

t 
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i g»eChatfle Net Account A pplica tion - Ne tscape "* "" "" 




e<£iarge 



Help I Secortty 





V Steps 



a a «4, 



Step 4; Activate Your Account 

Activate your Digital ID 

eCharge's security starts wrth a unique digital certificate, which stays on your computer This 
digital certificate, combined with your Pass-Phrase, makes up your Digital ID. To activate your 
Digital ID. follow these simple steps: 

Digital ID Name 



Security Pass-Phrase: 



Confirm Pass-Phrase: 



Security Question: 



t: Enter the name you'd like to use to identify yourself to 
^ eCharge. Example: BobsJD 

Your Pass-Phrase should be something youli remember 
and no one else can figure out. Your Pass-Phrase must be: 
" at least 12 characters long 

* include at least one capital letter 

* one lower-case letter 

* one punctuation mark 
- and one number 

Example: My dog Skip weighs 15 pounds. 
[ Re-type your Pass-Phrase. 



J Enter a question that will help you remember your 
Pass-Phrase. Example. How much does my dog weigh? 



This Digital ID will constitute your signature for purposes of accepting the Terms and 
Conditions of your Account, as well as for making future purchases with your eCharge 
Net Account This Digital ID has the same legal force and effect as your physical 
signature. By dicking the Activate button, you agree to these terms, as well as the 
Terms and Conditions of the Agreement 



Httg | Security 



630 



Fig.8G. 
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e Chatge - Ac count Centei • Netscape 




.-ffil -«»B-. -a-Bj ■ E : «y 
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I haig e - Account Cente r - NeUcapc 



I e^rge- 



Horn* 1 Help | StcvrHy | logout 



. ttnMCEPwt Y Account DM^^f" Statements, TBaim^Sfiwdhj.- 

Chi»flt AecounHnfa | Change Fa^Phu-e | C.eatt Sub B^.mt ' " ' ' 



Change your Pass-Phrase 

For your security and convenience, you can change your Pass-Phrase at any time 
Just select your Digital ID and M in the information below. ' 



Piqital ID : 



[-Select Digital ID- [fl 

Old Pass-Phra<;p - 



i 



New SecurilvQuestinn- 



[ 



New Pass-Phrase - 



Re-enter New Pass-Phr»gp- 



| CAHCtL jj 



t!i^± 1 Help | Steuritv | Log Out 
I Ttrmt and Condrtiont 
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5> eCharge • A ccou nt Centei * Netscape 




e<^iarge- 



NET- ACCOUNT -T~j 



JMo I Chjne* Par>P^jf» | Cre its Sub ficcouM 



Create a Sub Account 

You can create up to (nre secure Sub Accounts at no change, giving everyone in your family a 
separate account. Or set up Sub Accounts for specific types of purchases. Each Sub 
Account also offers parental controls, which let you set purchasing timrts for the kids and 
restrict the web sites from which they can purchase. 

For security reasons, each account holder is assigned a personal Digital 10 and Pass-Phrase. 
As the primary eCharge Net Account holder, you're liable for all charges incurred by the Sub 
Account holders, b* you need more than five Sub Accounts, you can create additional 
accounts for a small fee. For details, please contact Customer Support 

All fields marked with a star f) must be completed before we can create your Sub Account. 

Sub Account Information 

Type of Account" 

$ Credit - This account allows you to shares the credit limit of your primary account. 
C Prepay - Purchases are automatically deducted from your pre-paid balance and you can 
add funds as often as you like to this Sub Account. 
Account Holder First Nam? " 
Account Holder Last Name * 
AccpunT 
E-Mail Address* 

Set parental controls 

Purchasing limits 

To set purchasing limits for this Sub Account. 611 in one or more of the following options. 
Smote Transaction $ £ 

Monthly Tgtal 



J 



1 



_J (number of transactions) 



Web site restrictions 

To set purchasing limits on specific web sites, simply type m the monthly dollar amount for 
each Retail Category. You can also restrict the Retail Categories from which your children can 
make purchases by checking the categories you want to restrict. 

Retail Gregory flffg Restrict 

Cnel > i -;| D 

OVD Express S I I D 

MP3.com $ I I O 



Spedal oflers . 

© Please send me notices about special offers from eChatge. online retailers who accept 
eCharge. and other companies. 

O Please send me special offer notices only from eCharga. 

C Please do not send me special offer notices from eCharge or any other company at this 



time. 



PLEASE NOTE: These settings apply only to this Sub Account You can change these 
settings at any time. 



CAXCCL J 



I HH» | S«Punty | Log Qui 



• jooo k fr'frt**'" ■»■ All n»h* 
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Primary Account Statement 

Stttenwt Dat« Paym«rt Du% O*o Cretft Ufnit Av*taM« Cr<xtt Total Amwrt I 

09/12/1999 10/09/1999 5/300 4,025 $975.00 

Credit Activity Summary 



)Pi«vious Balance 


1 1 


948.33 


{purchases 


M 


823.00 




r—i — 
1 'I 


898.33 


(Credits 


i"-r 


000 


ONer Charges 


hi 


0.00 


Jfihakce charge 


w 


2JTO 




i-i 


97SJJ0 


}>«*nl mum Paymcrt Out . 


1 1 


48 iW 



Errors or disputes must be reported in accordance with the Fair Credit Billing Act 



Transactions for Terry Smith 

Posting ''Mm"- , Tram /Oat* . , Vans'. No. 

09/12/1999 09/12/1999 324583867 
09/15/1999 09/15/1999 324583867 
09/17/1999 09/17/1999 324583867 

Transactions for Chris Smith 

PostingDate Trans. Oat* 1 Ho._ 
no nrwtmo . rmnrmnm jsojcoooctt 



www cdnow com 
www amazon com 
www, ebay.com 

Total: 

...Description 



t j.nr 



660 




634 
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i g~eCharge • Acc ount Center • Netscape 



EEIE3| 




WET ACCOUNT- -vl 



Snt»»ner-ts | Real-Tiir.t Tiansacfcori; 



R8jffrenteAftinfllne. ; 



View real-time transactions 

Below are transactions posted since your last statement: 



Terry Smith - Credit 



Available Balance $2,314 



08AM/1999 OaOI/1999 Payment received 



Chris Smith . Credit 



Posting O** T/an*. Data - - O**cn^on 

08/14/1999 08/12/1999 www.Xrewcnm 



Terry Smith . Prena 



Posting ttata~ . arm. 0*« i • " OnaipBv*~~: 

08/01/1999 08/01/1999 Funding received 



Kimmie Smith - Prena 



Posting Oat* frans.O*a "-* -Omrlpeon 
Pending 08/17/1999 wwweToys.com 



/ 



Ffy^cY f Tcotx jnd Condition* 
* 2000 -?Cr.j'-j< r..>tf.f. t ji,.-. r .. Alt fight! •**itv*4. 



Available Funds $500.00 



Available Funds $30.01 



665 



Fig.lOB. 
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jSgChar ge • Account Center • N etscape 

it"? '$5- s& tk^'~^"~";TFvT 




HB* *>a-^ 'gar- 



Fig. IOC. 
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gr Vi rtu al Store - Netsc ape 

£3e Edit View £o Corrcnurccatot Help 



VIRTUAL STORE 



1105 



Virtual Store 




Tired of the same old online stores? 




Sw*. Smirt. ExtreWy rtylih. The new WtuJ Sort perioral confute™ sp«d 
^ouo* «vtn the most oVtwndkigUskt * , fcghtning. pice. thanks to « fcohtening 
brf proceiior running •< up to 4S0 m^jahtrU. And w4h Ftr«Wr« and USB 

ports, they're r«*dy to connect to toda/i hottest *ccenori«. 



Order 



Oocument:0ons 



1110 



1100 



Fig. 11 A. 



* 
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Order Form 



Quantity Description Amount 
1 Virtual Store PC $449.00 
1 2 day Stepping $10.95 
Total $459.95 




1160 



1150 



Payment Type | eCharge 



Account # f 



Expiry Date |hw/YY | 
Name on Card [~ 



Help/FAQ | Customer Support 



DIGITAL ID: 

|-Setect Digital ID- jfl 



PASS PHRASE: 




&eCHARGE- Netscape 



EES 



CANCEL J 



Forgot Your Pass-Phrase? 



1170 



Fig.UB. 
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^eCHARGE - Netscape 



EMM 



Help/FAQ | Customer Support 




FROM ACCOUNT: 
| Terry's Credit |g| 



Your Purchase 




Qty. 

1 

1 



It?cre Price ea_ 

Evolution Ski Slickrock Telewaxk Skis $430.00 

Puaoa HigK Octane II Running Skoes $44.00 

Color A; Siae: 5.S ' / " 

Bunlop Grand Prix Titanium Tennis B a. . $10.00 
Subtotal 

.Tax.--' . \'\ vV' J v\^ : ^?^ 
Skipping ^ " " ":" ~"V^ : - : "V 



Total 
$430.00 
$44.00 

$20.00 
$4*4-00^ 

■$ib.6b 




I authorize eCharge Corporation 
to xxx xxxxxx xxxx xx 



1180 




Fig. 1 1 C. 
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!$eCHARGE - Netscape 



5^ Help/FAQ | Customer Support 

e<£jarge-J 



Thank you for using eCharge, 
the secure way to buy online. 



TRANSACTION 
COMPLETED 



z 



CLOSE 



1185 
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IRTUAL STORE 



Youll see something new each day. 



Thank You 




Thank you for your purchase. Your purchase will be delivered to you n 2 days. 



Reference*: W12003 

Item Purchased: Virtual Store PC 

Paid by: eCHARGE 

Shp to: 123 Oak Street, Vancouver, WA 99999 
Tradchg*: 32741613 

If you have any questions, please contact 
us at customer servicecavirtual stare.c , p m. 
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START ORDERING VIA WEB BROWSER 



J. 



ESTABLISH SECURE CONNECTION TO 
COMMERCE GATEWAY WEB SERVER 



RUN BUYER AUTHENTICATOR 
(Fig- W 




DISPLAY VPA SE LECTION WEB PAGE 

I 

COLLECT SUB-ACCOUNT 
INFORMATI ON FROM BUYER 

* 




SEND SUB-ACCOUNT AND 
AUTHENTICATION CONTAINER TO 
ACCOUNT ID CONTAINER GENERATOR 

(Fig. 17) 



I 



RECEIVE ACCOUNT ID CONTAINER FROM 
COMMERCE GATEWAY 

T 



OBTAIN PURCHASE CONFIRMATION 
FROM BUYER AND SEND PURCHASE 

REQUEST WITH ACCOUNT ID 
CONTAINER TO COMMERCE ENGINE 

(Fig. 18) 



RECEIVE PURCHASE REQUEST RESPONSE 
FROM COMMERCE ENGINE 



DISPLAY ORDER CONFIRMATION SCREEN 



242 




DONE 



> 



227 



Fig. 12. 



DISPLAY BUYER 
AUTHENTICATION 
ERROR MESSAGE 




228 



230 




232 



234 



238 




240 



241 
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( START BUYER 
\AUTHENTICATOR 




243 
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RECEIVE 
AUTHENTICATION 
REQUEST AND 
CONTAINER 
FROM WEB 
BROWSER 



244 



65 




INSERT 
CERTIFICATE ID 
INTO 
AUTHENTICATION 
CONTAINER 



RETURN 
AUTHENTICATION 
REQUEST AND 
CONTAINER TO 
WEB BROWSER 



7 



250 



GENERATE 
ALTERNATE 
AUTHORIZATION 

SCREEN 
(Fig.U.) 





APPLY FOR A 






VIRTUAL 






PAYMENT 






ACCOUNT 






(Fig. 15.) 





DETERMINE 
AUTHENTICATION 

STATUS AND 
RETURN IT TO WEB 
BROWSER 



262 



RETURN 



> 



0 



256 



261 



RETURN 
UNSUCCESSFUL 
AUTHORIZATION 
TO WEB BROWSER 



Fig. 13. 
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START ALTERNATE 
AUTHORIZATION 



> 



DISPLAY AUTHORIZATION 
OPTIONS 



1401 



REQUEST 
AUTHORIZATION 
CODE? 



1410 



DISPLAY CODE ENTRY 
AUTHORIZATION FORM ON WEB 
BROWSER 



SEND AUTHORIZATION CODE TO 
BUYER'S AUTHENTICATION 
DEVICE 



BUYER COMPLETES CODE ENTRY 
AUTHORIZATION FORM ON WEB 
BROWSER 



TRANSMIT AUTHORIZATION 
FORM TO COMMERCE GATEWAY 



1405 



■No- 



1415 



1420 



DISPLAY 
INTERACTIVE 
AUTHENTICATION 
FORM ON WEB 
BROWSER 



1425 



1430 



BUYER COMPLETES 

INTERACTIVE 
AUTHORIZATION 
FORM ON WEB 
BROWSER 




1499 



1450 



1455 



RETURN UNSUCCESSFULL 
AUTHORIZATION 



1498 



Fig.U. 
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START APPLYING FOR A 
VIRTUAL PAYMENT ACCOUNT 
VIA WEB BROWSER 



270 
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RECEIVE REQUEST FOR 
APPLICATION FORM 




SEND REQUEST FOR 
APPLICATION FORM TO 
COMMERCE GATEWAY WEB 
SERVER 



260 



RECEIVE AND DISPLAY 
APPLICATION FORM FROM 
COMMERCE GATEWAY WEB 
SERVER 



SEND COMPLETED ACCOUNT 
APPLICATION FORM TO 
ENROLLMENT SERVER 
(Fig.U.) 



266 




RECEIVE AND 
DISPLAY 
UNSUCCESSFUL 
APPLICATION 
RESULT PAGE 

FROM 
ENROLLMENT 
SERVER 



GENERATE KEYPAIR ON BUYER 
COMPUTER AND SUBMIT PUBLIC 
KEY TO ENROLLMENT SERVER 



RECEIVE AND DISPLAY 
SUCCESSFUL APPLICATION 
RESULT PAGE FROM 
ENROLLMENT SERVER 




276 



278 



RECEIVE DIGITAL CERTIFICATE 
FROM ENROLLMENT SERVER 



c 



DONE 




279 



Fig.15 
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START ENROLLMENT 



RECEIVE COMPLETED 
APPLICATION FROM 
BUYER COMPUTER 




280 
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282 



89 



REQUEST 
INFORMATION FROM 
ID BUREAU 
(Fig.27.) 




283 



REQUEST 
INFORMATION FROM 
CREDIT BUREAU VIA 
CREDIT PROCESSING 
SERVER ADAPTER 
(Fig.ll.) 



SCORE APPLICATION 
BASED ON ID BUREAU 
AND CREDIT BUREAU 
INFORMATION AND 
INTERNAL CRITERIA 



286 




289 



RETURN UNSUCCESSFUL 
ENROLLMENT 



Fig .16. 
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START ACCOUNT ID 
CONTAINER GENERATOR 




RECEIVE SUB-ACCOUNT, AND 
AUTHENTICATION CONTAINER 
FROM WEB BROWSER 



DETERMINE INTERNAL 
ACCOUNT ID ASSOCIATED 
WITH AUTHENTICATION 
CONTAINER 



CREATE EMPTY ACCOUNT 
IDENTIFICATION CONTAINER 



ADD INTERNAL ACCOUNT 
IDENTIFICATION AND SUB- 
ACCOUNT INFORMATION TO 
EMPTY ACCOUNT ID 
CONTAINER 



APPLY INTERNAL DIGITAL 
SIGNATURE TO ACCOUNT ID 
CONTAINER 



RETURN ACCOUNT 
IDENTIFICATION CONTAINER 
TO WEB BROWSER 



800 



802 



804 



806 



808 



810 



812 



814 



C 



RETURN 



Fig. 17. 
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START COMMERCE ENGINE 



I 
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300 



RECEIVE REQUEST AND ACCOUNT 
IDENTIFICATION CONTAINER 
FROM WEB BROWSER 




302 



75 



316 



FORWARD REQUEST TO 
COMMERCE GATEWAY 
ADAPTER 
(Fig.19.) 



I 



RECEIVE RESPONSE FROM 
COMMERCE GATEWAY ADAPTER 



I 



SHIP AUTHORIZED PRODUCT 



I 



SEND SETTLEMENT REQUEST TO 
COMMERCE GATEWAY 



I 



SEND RESPONSE TO WEB 
BROWSER 



I 



RETURN 



> 



PERFORM 
TRADITIONAL 
AUTHORIZATION 



I 



SHIP AUTHORIZED 
PRODUCT 



308 



I 



SEND SETTLEMENT 
REQUEST TO 
TRADITIONAL CREDIT 
PROVIDER 



310 



I 



SEND RESPONSE TO 
WEB BROWSER 



312 



314 



318 



320 



322 



324 
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START COMMERCE 
GATEWAY ADAPTER 



RECEIVE REQUEST AND 
ACCOUNT IDENTIFICATION 
CONTAINER FROM COMMERCE 
ENGINE 




SEND REQUEST AND 
ACCOUNT IDENTIFICATION 
CONTAINER TO 
TRANSACTION SERVER 
(Fig.20.) 



I 



RECEIVE RESPONSE FROM 
TRANSACTION SERVER 



FORMAT RESPONSE 
INCLUDING TRANSACTION 
STATUS FOR COMMERCE 
ENGINE 



FORWARD FORMATTED 
RESPONSE TO COMMERCE 
ENGINE 



RETURN 



336 



338 




Fig.19. 
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(start transaction server 




RECEIVE TRANSACTION REQUEST 



DECODE AND VERIFY ACCOUNT 
IDENTIFICATION CONTAINER 



SEND TRANSACTION REQUEST 
TO CREDIT PROCESSING 
SERVER ADAPTER 
(Fig.21.) 



RECEIVE RESPONSE TO 
TRANSACTION REQUEST FROM 
CREDIT PROCESSING ADAPTER 



STORE TRANSACTION RECORD 



350 



RECORD ORIGIN AND CONTEXT 
OF TRANSACTION REQUEST 






363 



364 



84 



357 



SEND 
IMPERMISSIBLE 
TRANSACTION 
RESPONSE TO 
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